Getting Started With Hashicorp Vault

Welcome to my github repo for getting started with Hashicorp Vault.

Here you can find all of the necessary templates and step by step instructions in order ot set up Hashicorp Vault if you are learning or wanting to try it out.

Feel free to check out the following sections. They'll be updated as I add more content to my video tutorials.

Tutorials

1. Setting up Consul & Hashicorp Vault

   We'll walk through the basic set-up of your Vault Server. In this tutorial, we use an Ubuntu 20.04 T.2 Micro instance on AWS.

   • Install Consul Backend

   • Creating A Cert For The Server

   • Install Hashicorp Vault

   • Youtube Tutorial Pt. 1

   • Sys File Templates

     • Consul Service File
     • Consul UI JSON
     • Vault Config File
     • Vault Service File

2. Creating & Accessing Secrets

   In this section, we'll go over creation of secrets and accessing them via CLI, Web Interface, or API.

   • Enabling The Secret Store Using The CLI

   • Enabling Secrets Using The UI

   • Accessing Secrets From a Remote Machine

   • Youtube Tutorial Pt. 2

   • Payload Template

3. Creating PKI & Enabling Cert Auth

   We'll introduce you to making Vault a certificate authority, creating certificates, importing certificates, and enabling cert auth. We also touch on policies a bit to show how to restrict access or allow access to secrets.

   • Creating New Secrets

   • Enabling PKI And Generating Certs

   • Enable Cert Auth And Adding a Policy

   • Youtube Tutorial Pt. 3

   • Vault Cert Policy Template

4. Alternate Auth Methods And SSH Secrets

   Here we'll go over other auth methods and introduce you to ssh using Vault.

   • Enabling Github As An Auth Method

   • Enabling Username and Password Auth Method

   • Adding SSH As A Secret

   • YouTube Tutorial Pt. 4

   • Sys File Templates

     • SSH Helper Service Config
     • OTP Policy
     • Config File

5. AWS/GCP Secrets And OKTA SSO

   We'll be adding in AWS and GCP to be able to generate access credentials for users through Vault rather than through the respective platforms. We'll also set up Vault to us OKTA SSO for authentication.

   • Enabling AWS IAM Role As A Secret

   • Enabling GCP As A Secret

   • Using Okta SSO With Vault

   • Sys File Templates

     • AWS IAM Policy