GitHub

About

Quick Start

Benchmarks

Configuration

Installation

Installation

Docker installation

Pull & run the container

docker run ruddickmg/vault-kms-provider:latest

Install via Helm

Add the helm repository

helm repo add vault-kms-provider https://vault-kms-provider.io

Install the chart

helm install vault-kms-provider

Install from source

Note

Vault KMS Provider requires rust for compilation. See rust documentation for installation instructions.

Clone the repository

git clone https://github.com/Ruddickmg/vault-kms-provider.git

Run the application

cargo run --manifest-path vault-kms-provider

Static pod installation

Note

  • Vault KMS provider needs to be installed on the control plane node

  • Adding a static pod manifest for Kubernetes may be different for certain Kubernetes distros. Consult your distro's documentation if necessary.

Create a static pod configuration for the vault KMS provider, example below.

apiVersion: v1
kind: Pod
metadata:
  name: vault-kms-provider
  labels:
    app: vault-kms-provider
spec:
  volumes:
    - name: vault-kms-provider-socket
      hostPath:
        path: /mnt
        type: Directory
  containers:
    - name: vault-kms-provider
      image: "ruddickmg/vault-kms-provider:latest"
      env:
        - name: SOCKET_PATH
          value: "/sockets/vault-kms-provider.sock"
      volumeMounts:
        - name: vault-kms-provider-socket
          mountPath: /sockets

Move the configuration file to /etc/kubernetes/manifest

mv /path/to/static-vault-kms-provider-config.yaml /etc/kubernetes/manifest

Restart kubernetes

systemctl restart kubelet