Be secret like a ninja with Mehdi LARUELLE Hashicorp Vault @D2SI - - PowerPoint PPT Presentation

▶
be secret like a ninja with
SMART_READER_LITE
LIVE PREVIEW

Be secret like a ninja with Mehdi LARUELLE Hashicorp Vault @D2SI - - PowerPoint PPT Presentation

Nov 24, 2022 648 likes •876 views

Be secret like a ninja with Mehdi LARUELLE Hashicorp Vault @D2SI Whoami ? D2SI Me Mehdi LARUELLE Cloud & Automation @mehdilaruelle Github Access Table of contents Contextualization 1 How does Vault work ? 2 Steps to become a

slide-1
SLIDE 1

Mehdi LARUELLE @D2SI

Be secret like a ninja with Hashicorp Vault

slide-2
SLIDE 2

D2SI Me

Mehdi LARUELLE

Cloud & Automation @mehdilaruelle

Whoami ?

slide-3
SLIDE 3

Github Access

slide-4
SLIDE 4

Table of contents

1

Contextualization

2

How does Vault work ?

4

Demonstration

3

Steps to become a ninja

slide-5
SLIDE 5

// Contextualization

1

slide-6
SLIDE 6

Problem ?

Mail Code

slide-7
SLIDE 7

Vault ? Why ?

slide-8
SLIDE 8

// How does Vault work ?

2

slide-9
SLIDE 9

Methods & Engines

  • LDAP
  • RADIUS
  • OKTA
  • JWT
  • Github
  • Approle (pipeline)
  • TLS Certificate
  • Kubernetes
  • JWT / OIDC
  • AliCloud / Azure / AWS

/ GCP

  • LDAP

Users App Auth methods

slide-10
SLIDE 10

Methods & Engines

K/V

  • Alicloud
  • AWS
  • GCP
  • GCP KMS
  • Azure

Secrets engines Static secrets Dynamic secrets Cloud Technology

  • Active

Directory

  • Consul
  • Database
  • Nomad
  • RabbitMQ

Others

  • PKI
  • SSH
  • TOTP

Encryption as a Service Transit

slide-11
SLIDE 11

// Steps to become a ninja

3

slide-12
SLIDE 12

Steps to be a ninja

Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data

slide-13
SLIDE 13

Steps to be a ninja

Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data

slide-14
SLIDE 14

Approle

slide-15
SLIDE 15

How is it working ?

  • 3. Get Token
  • 4. Get secrets with Vault token
  • 1. Send

Secret ID

  • 2. Auth with Approle
  • 1. Send

Role ID

slide-16
SLIDE 16

Steps to be a ninja

Find secrets Put secrets in Vault Make secrets dynamics Encrypt sensitive data

slide-17
SLIDE 17

Secret as a Service

1.Ask DB credentials 3.Get credentials 5.Ask to revoke credentials 4.Application use credentials to authenticate into DB 2.Vault create credentials into DB and retrieve it 6 . R e v

  • k

e c r e d e n t i a l s

slide-18
SLIDE 18

Steps to be a ninja

Find secrets Put secrets in Vault Make secrets dynamics Encrypt data

slide-19
SLIDE 19

EaaS: Encryption as a Service

Application A Application B

1.Put raw data 2.Get encrypted data

  • 3. Put encrypted data
  • 4. Get encrypted data

5.Put encrypted data 6.Get decrypted data

slide-20
SLIDE 20

Demonstration

slide-21
SLIDE 21

To infinity... and beyond!

Vault Agent Consul service mesh envconsul and / or consul- template

slide-22
SLIDE 22

Question ?

The last but not least