The fact you explain this stuff without using the insane amount of buzzwords and cryptic terminology that other guides use is phenomenal. Great work!
@yeyerrd3 ай бұрын
The only person who could explain the concepts and how Vault works in one go!
@thalperi23 жыл бұрын
Absolutely love your style, the speed, how deeply you get into everything. Thank you so much, Marcel. Would be awesome if you could put together an entire HashiStack series. Nomad, Consul, and Boundary, especially. More ops and less dev but how these three work together with Vault is needed for setting up the environment for any dev. What do you think?
@mmu992 жыл бұрын
I've been watching lots of video on this HashiCorp Vault but only here I found answers to all my questions regarding vault. Thanks for the video mate!
@tombrightbill72493 жыл бұрын
Yea this is great. Super clear and crisp delivery without rabbit-holing at all. I'm sure you're a great public speaker!
@MarcelDempers3 жыл бұрын
Thanks for the kind words, I'm glad you enjoyed it :)
@sandro_j4 жыл бұрын
Thank you for making these videos. Really helpful and appreciate the level of details in your explanations.
@law1213 Жыл бұрын
Absolutely fantastic video. I love that you've started with this demo to explain it, then gone into more details in part 2.
@romanmasiar122 Жыл бұрын
Great way of wxplaining things. Agree, your lecture is compact, easy to understand and relevant indeed!
@RahulSharmaSingularity2 ай бұрын
Fantastic Series , Kudos for all your knowledge sharing and efforts here !
@tarunprakash25904 жыл бұрын
Great work @Marcel ...eagerly waiting for the next video on HA & how secrets gonna be used btw vault and the pods along with best practices.
@polmaksim4 жыл бұрын
Super simple and clear tutorials. Thank you so much!
@Hybrid_Netowrks Жыл бұрын
Very impressive. Thanks for your contribution
@shubhamnagure76542 жыл бұрын
absolutely worth watching.
@saadullahkhanwarsi585311 ай бұрын
Quite informative tutorial. hope to see such content more in future. Thanks alot
@yeesh26304 жыл бұрын
Mate your videos are amazing! Great editing, great music taste and super informative, subbed bro keep going!
@MarcelDempers4 жыл бұрын
I'm glad you enjoyed it, thanks for the support ❤
@user-dn4vv5wx6n3 ай бұрын
Wonderful knowledge sharing session ... Love it !!!
@diademrocks3 жыл бұрын
Thank you so much for these! They really help alongside the official documentation :)
@luizgomeslg3 жыл бұрын
First time here and really loved the explanation and the depth of it! Thanks for the video, and I will surely watch the rest of them on your channel! Thumbs up!
@ayencoscolfield33122 жыл бұрын
Awesome content always, i must confess one thing honestly i never get tiered of watching your videos , i could stay glue for hours , you shared tons and tons of quality contents always , thank you so much for being there for guys. By the way can you upload a video on terraform infrastructure as code IAC, i have searched i didnt see anyone by you
@JanPhilippHeinrich3 жыл бұрын
Im really sad that I cant give more then one thumbs up :) really great video, thank you
@spiraldynamics60085 ай бұрын
Thank you very much! ❤
@syednadeembe2 жыл бұрын
thank you for the video its a very good starting point
@lylehenkeman99784 жыл бұрын
Love your videos dude! Also a fellow software developer form South Africa
@MarcelDempers4 жыл бұрын
Baie dankie! en groette daar 😃💪🏽
@gaetanjaminon24404 жыл бұрын
Really good and helpful video . Thanks
@anthonyrussano2 жыл бұрын
thank you
@matrix_root2 жыл бұрын
Just best. Like always 👍
@stanislasquastana32684 жыл бұрын
Great job and good explanations. thanks !!
@maciejkolodziejczyk41362 жыл бұрын
Marcel this is pure gold!
@VinceBaileydns-direct3 жыл бұрын
Thank you this very good so far
@samollojr-er7cb Жыл бұрын
Waou Amazing video
@Ayush-xp8kc4 жыл бұрын
Nice explanation. waiting for HA version. Also, if possible share the difference between using etcd clusters vs consul. Thanks
@AndrewFigaroa Жыл бұрын
Awesome! thank you for explaining this... I am in also on the fence between is vault "really" solving\facilitate secret management OR just overly complex...
@MarcelDempers Жыл бұрын
Secret management is generally complex, especially when financial audits are involved and access to the secrets can only be authorised by more than two parties. This is generally where vaults come in. Simpler solutions exist, but they are mainly around focusing on secret hygiene, for example protecting secrets with RBAC so they cannot be retrieved once created, prevent exec into containers, limit who can create secrets.. etc
@sageatahan54893 жыл бұрын
Great Video!!! First timer. Was wondering if you could make a video explaining how to deploy Vault on k8s gcloud cluster using an Operator : )
@syedhyder56306 ай бұрын
I have a small doubt. Why do you provide the vault pod with a service account. It doesn't need access to any of the cluster resources right?
@anil50652 жыл бұрын
I am wondering if where I can see the video of setting up vault, cert-manager for kubernetes to auto renewal of certificates, would be awesome if you can share your experience
@stolmiti3 жыл бұрын
You Rock!!
@rickyclarke12674 жыл бұрын
Please make a tutorial on JFrog running on Kubernetes(Installation & Configuration), using it as an artifactory
@mtan37163 жыл бұрын
Thank you for your videos. I have a problem with vault being initialized already on installation. I think this is because I have previously installed (using terraform's helm provider), initialized and unsealed it on my GKE cluster to test out but removed (using terraform) it after some trials. How do I uninitialize vault in this case to restart again? Thank you for your time!
@pratikbhandari16763 жыл бұрын
Great video
@mzimmerman19884 жыл бұрын
nice video!
@tirushv96812 жыл бұрын
Considering a scenario where we have a pod running with some backend application connected with AWS RDS database using vault due to high traffic these pods and nodes needs to scale and communicate with the database pretty frequently so as the vault creates temporary credentials isnt it consuming the disk usage by creating users and more connections happening with RDS. (Just got this question into my head). Hoping for a reply with solution. Thank you . Love your content
@MarcelDempers2 жыл бұрын
Thanks for the kind words 🙏🏼 Secret rotation should have zero impact to application performance. You should tune your database client to handle connections efficiently and can establish new connections when a new secret comes along. This should not create disk IO unless the application is written incorrectly
@tirushv96812 жыл бұрын
@@MarcelDempers Got it thank you.....have a small question If Pods are created with Front end app (Nodejs) and backend (mYsql) with EBS scaling is easy using Cluster and Pod scaling ....... But here how to app pods has communication with other MySQL pods from other nodes to have consistent data ? How does these MySQL EBS pods distribute it's all data accross the app pods?
@DommageCollateralАй бұрын
yet again i check out k8s obelix videos to gain better devops skills
@kyand9203 жыл бұрын
I have a question, that /vault/secrets/ directory is world readable... Isn't that a bit "not secure" ?
@rayr2683 жыл бұрын
Your videos are killer
@DevOpsKey1 Жыл бұрын
@Marcel I have a kind suggestion can you please made a Azure Tutorials please I always enjoy your Video.
@benkhemismarwen24313 жыл бұрын
amazing video ❤️
@fdghjvgf4 жыл бұрын
Coolest !! :)
@oschvr4 жыл бұрын
Awesome ! Thank you
@rayudu20803 жыл бұрын
Hey Hai Can we do auto unseal process within vault yaml files, can you please let me know if there is process.
@jitendrapatil14 жыл бұрын
nice video
@ryancorales73513 жыл бұрын
@marcel inject vault secrets to my pods in path /vault/secrets/mysql/, how am i supposed to use that secrets in my java application, thanks
@I_love_our_planet2 жыл бұрын
Or store the Seal Keys in a proper KMS System from a Cryptovendor ;-)
@fosheur5614 жыл бұрын
I try to use it on Azure, but i don't found how to expose correctly the app..
@srammanokar3 жыл бұрын
GREAT!!👏👏
@sovsemnetot3 жыл бұрын
thanks a lot!!
@lachopaez30803 жыл бұрын
Seems that the certificate is expired. $ vault operator init Error initializing: Put 127.0.0.1:8200/v1/sys/init: x509: certificate has expired or is not yet valid
@lachopaez30803 жыл бұрын
I bypass this adding this "- name: VAULT_SKIP_VERIFY value: "true" after line 94 on the file "server-statefulset.yaml". Nos is pendding how to upgrade with valid certificate.
@Oswee3 жыл бұрын
You should kill the root token ASAP because it has no any logging. I mean... You can't do any meaningful activity tracking.
@liberator483 жыл бұрын
Appreciate the effort but bro take a step back, don't just talk into my face with words, visualize it for me from the start... i'm trying to learn this and I don't know what you're saying.
@zhang202443 ай бұрын
I received this error: Error initializing: Put 127.0.0.1:8200/v1/sys/init: x509: certificate has expired or is not yet valid. can you please provide solution ?
@Alpha-kt6hc Жыл бұрын
Get error as soon as I do vault operator init: Get "127.0.0.1:8200/v1/sys/seal-status": x509: certificate has expired or is not yet valid: current time 2022-11-27T09:07:18Z is after 2021-03-02T22:46:00Z
@MarcelDempers Жыл бұрын
you'll need to generate a new cert as shown in the guide