Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Hashicorp Vault Production setup for SRE

Name: Hashicorp Vault Production setup for SRE
Rating: 5.0 (1 reviews)

Learn quickly on what Vault is, why we need it, how to set it up & secure it on production

Created byTharun Shiv

Last updated 1/2022

English

What you'll learn

Know why we need Vault
Know what is Sealing and unsealing of Vault
Differences between Dev mode & Prod mode Vault
Setting up Vault TLS with TLS MySQL backend

Course content

5 sections • 17 lectures • 2h 58m total length

The need for Hashicorp Vault8:45
Understand why secret management is essential and how Hashicorp Vault centralizes secrets, enforces access control and audits, provides encryption as a service, dynamic secrets, and high availability.
Why Vault?2:57
All you need to know about Seal & Unseal of Vault11:25
This lecture covers seal and unseal in Vault, including unseal keys, the master key, and Shamir's secret sharing, plus creating policies and tokens to manage secrets in production.
Seal & Unseal of Vault0:56

Overview of a Vault Setup0:14
Dev mode setup - hands-on9:13
Set up vault dev mode on ubuntu, export VAULT_ADDR and VAULT_TOKEN, unseal with the root token, detach the session, and note production differs from the demo.
Production mode setup - hands-on12:04
Set up Vault production mode with certificates, a storage backend, and the unseal workflow; configure the server, start it, and verify initialization and unseal.
PRACTICE - Vault Setup0:09

18 ways to ATTACK a Hashicorp Vault server & how to protect your server from it?30:35
Master 18 production hardening steps for HashiCorp Vault, from running as an unprivileged user and restricting root access to enabling audit logs, time sync, and secure storage.
Restrict access using Vault Policies24:34
Define and enforce vault policies to grant precise privileges to user groups, applying capabilities like read, create, update, delete, and deny to secret paths.

Bonus: MySQL setup with TLS/SSL17:34
Install mariadb or mysql on ubuntu and set up tls with certificates for encrypted connections; generate a certificate authority, csr, and server certificate, and enforce ssl for logins.
Vault backend as MySQL with TLS15:00
Configure Vault with a MySQL backend secured by TLS for production deployments, including proper 0.0.0.0 bind addresses, MySQL user setup, privileges, and TLS certificate alt names.
Vault HA conclusion0:03
PRACTICE: VAULT MySQL backend0:09

What's Next?0:07
BONUS Who are Site Reliability Engineers? Their Roles & Responsibilities23:24
Discover the roles and responsibilities of site reliability engineers, from provisioning virtual machines and services to building monitoring scripts, optimizing infrastructure, and managing upgrades, scale, and decommissioning.
BONUS: Non technical must have skills that will get you a PROMOTION at work21:34
Develop non-technical skills to accelerate promotion by embracing a no-blame mindset, clear communication, team shadowing, thoughtful change management, vigilant production practices, and disciplined version control.

Requirements

No prerequisites

Description

As an engineer, one has to implement secure solutions. One such need for the day is securing user data, that too private data like Credit card details, govt ID details, phone numbers and user passwords. As a robust and easy solution to that, we have Hashicorp Vault. Hashicorp Vault is an opensource software from Hashicorp. Vault is used to manage secrets.

What is a secret?

Secrets can be considered as anything that one uses to authenticate, authorize themselves. Secrets are also pieces of information that are private to any user.

In this course:

1. We will quickly take a headstart on what Vault is and why we need it. The instructor has used Mind Maps to illustrate about this.

2. We will look at what is seal and unseal of Vault

3. We will learn how to setup the Dev Mode Vault server to get started quickly

4. We will learn the difference between Dev Mode and Prod mode server

5. We will learn how to setup the Production Mode Vault server with file storage

6. We will learn how to secure Production Mode Vault server from attacks.

7. We will learn about the Vault User Policies to restrict access

8. We will convert Vault into a High Available Cluster using MySQL backend

9. As a bonus you will also learn how to setup MySQL server with TLS.

Who is this course for?

This course is for Site Reliability Engineers / System Administrators who want to setup a secure and production level Hashicorp Vault server. This course will cover the setup process in detail since that is the crucial part of Hashicorp Vault.

About me:

Hi, I'm Tharun, a Site Reliability Engineer who is passionate about spreading knowledge.

See you inside the course.

Who this course is for:

SRE who wants to know how to setup a production ready Hashicorp Vault server

Hashicorp Vault Production setup for SRE

What you'll learn

Explore related topics

Course content

Headstart into Hashicorp Vault4 lectures • 24min

Dev setup vs Prod setup of Vault4 lectures • 22min

Secure your Production Vault Server2 lectures • 55min

Vault MySQL Backend with TLS & High availability4 lectures • 33min

You are READY!3 lectures • 45min

Requirements

Description

Who this course is for: