Saikiran Pinapathruni
Saikiran Pinapathruni
  • 164
  • 342 834
Day 25 HashiCorp vault with Ansible & Terraform Integration #saikiranpinapathruni
Imagine your Java application running smoothly on a server until an unexpected reboot disrupts everything. The server comes back online, but your app can't function without sensitive information. So, how do you retrieve this securely without manual intervention?
Enter HashiCorp Vault, your ultimate solution for centralized secrets management. Unlike Ansible, which excels in configuration management as a push-based tool, Vault takes the lead in managing sensitive data, whether you're using cloud-native solutions like AWS Secrets Manager or Azure Key Vault, or operating in an on-premises environment with no internet access.
In this video, I’ll show how I integrated HashiCorp Vault with Ansible to tackle this challenge. By using Terraform, I configured Vault to utilize AWS KMS for auto-unsealing and encryption. This setup ensures that even if a server reboot occurs, Vault automatically unseals itself, retrieves critical secrets, and guarantees business continuity-no manual intervention required.
Join me to explore this powerful integration and enhance your DevOps skillset with real-world solutions for secure, seamless application management!
Timestamps:
0:08: Reboot scenario for applications on EC2 instances.
1:05: Introduction to HashiCorp Vault and use case for managing sensitive information.
3:06: Practical overview of Vault setup and integration with AWS.
4:08: Creating an EC2 instance with required configurations for Vault.
7:29: Installing necessary dependencies for HashiCorp Vault.
8:53: Generating SSL certificates for secure communication.
12:45: Initializing and configuring HashiCorp Vault.
15:14: Setting up Vault as a system service.
17:10: Unsealing Vault and accessing it.
22:06: Issues with reboot and sealing Vault.
24:27: Using Terraform to automate Vault configuration.
27:32: Creating IAM roles and policies for Vault and KMS.
31:01: Configuring Vault to store data in S3 and use KMS for auto-unsealing.
32:52: Running Terraform to set up users and passwords in Vault.
35:12: Troubleshooting and workaround for auto-unsealing issues.
38:57: Final validation of the setup and importance of secure credential management.
39:32: Closing remarks and plans for the next session.
Links:
GitHub : github.com/saikiranpi/Mastering-DevSecOps
Docker : hub.docker.com/u/kiran2361993
LinkedIn : www.linkedin.com/in/saikiran-pinapathruni-a0243569/
Medium : medium.com/@pinapathrunisaikiran
Instagram : saikiran_pinapathruni
Want to contribute : buymeacoffee.com/saikiranpi
Book 1:1 call : topmate.io/pinapathruni_saikiran
#devops #HashiCorpVault #ansible #aws #terraform #SecretsManagement #automation #cloudcomputing #SecureApplications #JavaApps #AWSKMS #VaultIntegration #itsecurity #OnPremSolutions #businesscontinuity #programming #kubernetestrainer #cloudcomputing #coding #devops #terraform #facts #kubernetes #awsdevops #automobile
Переглядів: 574

Відео

Ansible Full Course with Tasks in 3 hours. #devops #saikiranpinapathruni
Переглядів 1,5 тис.День тому
🌟 Master Ansible: A Complete Guide to Infrastructure Automation 🌟 Welcome to my Ansible Video Series ! This comprehensive series will take you from the basics of Ansible to advanced real-world use cases, enabling you to automate your infrastructure like a pro. 🛠️ What You'll Learn in This Series 🔹 Creating Servers with Terraform - Learn to provision and manage servers efficiently using Terrafor...
Day 24 Ansible Dynamic Inventory real time practical. #saikiranpinapathruni
Переглядів 46014 днів тому
Managing dynamic servers in auto-scaling environments just got easier with Ansible Dynamic Inventory! 🚀 In this video, I break down the concept of dynamic inventory, explain how it adapts to scaling servers, and demonstrate a real-time example using an auto-scaling group. Whether you're a DevOps engineer or just starting your automation journey, this tutorial will simplify managing dynamic infr...
Day 23 Automate Nginx & MySQL with Ansible Jinja2 Templates! #saikiranpinapathruni
Переглядів 53821 день тому
Welcome back to Day 03 of our Ansible series! In this session, we're diving into Jinja2 templating with Ansible to automate configurations for Nginx and MySQL. 🌐💡 Dynamic Nginx Configuration using Jinja2 templates MySQL Setup and Configuration with Ansible variables and templates Using Pre-Tasks and Post-Tasks for efficient playbook management Validating MySQL status and database connections De...
Day 22 - Ansible with Redis for storing the Facts | Ansible Vault #saikiranpinapathruni
Переглядів 68421 день тому
In this video, we dive into advanced Ansible setups, focusing on configuring Redis as a cache for faster fact gathering and using Ansible Vault to securely store sensitive information, such as credentials. This step-by-step guide covers essential configurations, how to optimize memory usage with Redis, and demonstrates the use of handlers for efficient service management. We'll also walk throug...
Day 21 Ansible & Terraform Integration: Automate Your Infrastructure Configuration with Ease
Переглядів 1,8 тис.28 днів тому
Learn how to combine the power of Ansible and Terraform to efficiently manage and configure your cloud infrastructure! In this tutorial, we’ll set up an Ansible Controller to configure multiple client nodes, seamlessly using SSH without requiring additional software on the clients. Watch as we create and provision servers using Terraform, establish secure VPC Peering for network communication, ...
Terraform Full Course With Tasks In 8hrs #saikiranpinapathruni
Переглядів 3,1 тис.Місяць тому
In this comprehensive series, we take you step by step through the essentials of Terraform , covering Various key services that are crucial for mastering Terraform. Whether you're just starting out or looking to deepen your understanding, this series has something for everyone! Timestamps: 0:00 - Introduction to Terraform and Cloud-Native Tools. 1:07 - Cloud-Native Tools vs. Terraform: Comparis...
Day 20 HashiCorp Packer for AMI Automation #saikiranpinapathruni
Переглядів 625Місяць тому
Day 20 HashiCorp Packer for AMI Automation #saikiranpinapathruni
Day 19 Terraform Modules with GitLab CI. DevSecOps #saikiranpinapathruni
Переглядів 657Місяць тому
Day 19 Terraform Modules with GitLab CI. DevSecOps #saikiranpinapathruni
Day 17 & 18 Terraform Cloud Engineer & Terraform Associate Certification course in 07 Hours.
Переглядів 3,6 тис.Місяць тому
Day 17 & 18 Terraform Cloud Engineer & Terraform Associate Certification course in 07 Hours.
Day 16 Terraform Modules Project with Development and Production Environment #saikiranpinapathruni
Переглядів 1,3 тис.Місяць тому
Day 16 Terraform Modules Project with Development and Production Environment #saikiranpinapathruni
Day 15 Mastering Terraform Functions with Lookup, Element, Length, Null and Taint.
Переглядів 908Місяць тому
Day 15 Mastering Terraform Functions with Lookup, Element, Length, Null and Taint.
Day 14 Terraform Functions -1, Realtime Use cases with task. #devsecops #saikiranpinapathruni
Переглядів 1,4 тис.Місяць тому
Day 14 Terraform Functions -1, Realtime Use cases with task. #devsecops #saikiranpinapathruni
Day 13 Enabling Logging and Managing Sensitive Information In Terraform #saikiranpinapathruni
Переглядів 964Місяць тому
Day 13 Enabling Logging and Managing Sensitive Information In Terraform #saikiranpinapathruni
Day 12 Managing Multiple Environments with Workspaces in Terraform. S3 versioning, DynamoDB Locking
Переглядів 1,6 тис.Місяць тому
Day 12 Managing Multiple Environments with Workspaces in Terraform. S3 versioning, DynamoDB Locking
Day 11 Practical video on Terraform dependencies along with variables, Tfvars #saikiranpinapathruni
Переглядів 1,3 тис.Місяць тому
Day 11 Practical video on Terraform dependencies along with variables, Tfvars #saikiranpinapathruni
Day 10 Mastering Terraform. Simplifying Cloud Infrastructure Management Across AWS #devsecops
Переглядів 2,6 тис.Місяць тому
Day 10 Mastering Terraform. Simplifying Cloud Infrastructure Management Across AWS #devsecops
Git and GitHub with tasks in 2 Hours #saikiranpinapathruni
Переглядів 2,6 тис.Місяць тому
Git and GitHub with tasks in 2 Hours #saikiranpinapathruni
Day 09 Mastering Git rebase merge stash with Tasks. #saikiranpinapathruni
Переглядів 676Місяць тому
Day 09 Mastering Git rebase merge stash with Tasks. #saikiranpinapathruni
Day 08 mastering Git with Terraform and Aws #saikiranpinapathruni
Переглядів 1,7 тис.2 місяці тому
Day 08 mastering Git with Terraform and Aws #saikiranpinapathruni
Day 07 Git for DevSecOps: Push Terraform Code to Private Repos Like a Pro! #saikiranpinapathruni
Переглядів 1,8 тис.2 місяці тому
Day 07 Git for DevSecOps: Push Terraform Code to Private Repos Like a Pro! #saikiranpinapathruni
Day 06 Shell Scripting with tasks in 3 Hours | #saikiranpinapathruni
Переглядів 3,5 тис.2 місяці тому
Day 06 Shell Scripting with tasks in 3 Hours | #saikiranpinapathruni
Day 05 Shell Scripting RegEx-Break-Continue-CustomExitCodes | #saikiranpinapathruni
Переглядів 9112 місяці тому
Day 05 Shell Scripting RegEx-Break-Continue-CustomExitCodes | #saikiranpinapathruni
Day 04 Real Time Task On User Automation | DevSecOps #saikiranpinapathruni
Переглядів 1,7 тис.2 місяці тому
Day 04 Real Time Task On User Automation | DevSecOps #saikiranpinapathruni
Day 03 Output Redirection in Bash | For & While Loops Explained | #saikiranpinapathruni
Переглядів 1,1 тис.2 місяці тому
Day 03 Output Redirection in Bash | For & While Loops Explained | #saikiranpinapathruni
Day02 Passing Arguments, Special parameters. DevSecOps Shell Scripting #saikiranpinapathruni
Переглядів 2,3 тис.2 місяці тому
Day02 Passing Arguments, Special parameters. DevSecOps Shell Scripting #saikiranpinapathruni
Day01 What is DevSecOps?DevSecOps RoadMap.Shell Script Variables grep-awk-cut #saikiranpinapathruni
Переглядів 8 тис.2 місяці тому
Day01 What is DevSecOps?DevSecOps RoadMap.Shell Script Variables grep-awk-cut #saikiranpinapathruni
Kubernetes [FULL COURSE in 10 Hours with realtime tasks] #saikiranpinapathruni
Переглядів 15 тис.2 місяці тому
Kubernetes [FULL COURSE in 10 Hours with realtime tasks] #saikiranpinapathruni
kubernetes full course in 10 hours with tasks on 4 node cluster #saikiranpinapathruni
Переглядів 8 тис.2 місяці тому
kubernetes full course in 10 hours with tasks on 4 node cluster #saikiranpinapathruni
Kubernetes cluster with kubeadm in 10Min.
Переглядів 7422 місяці тому
Kubernetes cluster with kubeadm in 10Min.

КОМЕНТАРІ

  • @Hulk12345-j
    @Hulk12345-j 56 хвилин тому

    anna more shell scripting videos please. like for day to day complex activities

  • @shivkumar-hn7wm
    @shivkumar-hn7wm 17 годин тому

    Finally i found the GEM 💎

  • @Poo1199-c1o
    @Poo1199-c1o 19 годин тому

    Bro i have 2 scenario based questions that i m not able to respond, could you answer these ‪ Suppose you have application running in delhi and Mumbai region and app in Mumbai region is down . How would you recover app in Mumbai region with zero downtime. How would you setup disaster recovery infra. What steps would you take. Suppose I have 1 apache server running in ec2 in Prod env and I have to upgrade it's version. How would you implement this with zero downtime and in prod env.

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 17 годин тому

      @@Poo1199-c1o 1. If i was you, inwould suggest to Set up multi-region deployment using Route 53 with health checks and failover policies and Replicate data across regions using RDS cross-region replication. So In case of failure, we have Route 53 to redirects traffic to the Delhi region. Tou also ASG here. 2.we can Launch new EC2 instances with the updated Apache version and attach them to the load balancer. Gradually route traffic to the new instances while draining connections from the old ones, this needs some testing bro, interviewers should not expect single shot answers .

    • @Poo1199-c1o
      @Poo1199-c1o 16 годин тому

      @SaiKirannPinapathruni thank you bro, understood!! Thank you for your effort for quick reply !

  • @sudeshbhong5352
    @sudeshbhong5352 19 годин тому

    how to solve below error--- ~# docker compose up -d yaml: line 6: mapping values are not allowed in this context i have installed docker compose and have all the file i.e Dockerfile.dev / prod / stage and docker-compose.yaml files; however still getting above error.

  • @anushaanayak
    @anushaanayak 20 годин тому

    While pinging vpc1 instance to vpc2 instance, you pinged instance 2 from 1 first and then pinged instance 1 from 1 only It had to be ping instance 1 from instance 2. At end of the video as well you pinged Ohio region instance from vpc1 instance twice, didn't use vpc2 instance. Timestamp 13.29 And end of video where you tried to ping Ohio instance from N.Vargina instances. Please do check :)

  • @kalzz-27
    @kalzz-27 День тому

    I'm learning everything in a single video which I learnt from a whole playlists of others😭

  • @kalzz-27
    @kalzz-27 День тому

    Thanks a lot for this!!💌

  • @vishnusai4658
    @vishnusai4658 День тому

    Thanks you sai

  • @iamrobiew
    @iamrobiew День тому

    Is this course enough to learn everything about AWS? Don't get me wrong but I'm a noob and just started learning and planning for a certification but don't know which one to go for, help me out please!

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni День тому

      @@iamrobiew Learn Linux basics and you can hit this

    • @iamrobiew
      @iamrobiew День тому

      @SaiKirannPinapathruni alright but with this course which certification I would go for, I mean cloud practitioner or solutions architect?

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni День тому

      @ Both

  • @syedaquib1082
    @syedaquib1082 2 дні тому

    brother is this course designed with respective of AWS SAA certification? I'm planning to sit for the examination in upcoming month.

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 2 дні тому

      @@syedaquib1082 Yes , all the services were covered in part 1 and 2

    • @syedaquib1082
      @syedaquib1082 2 дні тому

      @@SaiKirannPinapathruni thank you brother for the information and prompt response. I'm looking forward to cover both the videos and interview preparation doc. Thanks again.

  • @SaiKirannPinapathruni
    @SaiKirannPinapathruni 2 дні тому

    Kubernetes Full Course : ua-cam.com/users/shortsWyN008Wc8GY?feature=share

  • @aniloruganti-m6t
    @aniloruganti-m6t 3 дні тому

    Thanks for entire series and valueable suggestions..

  • @mudasir2168
    @mudasir2168 3 дні тому

    Amazing explanation! In my environment outside the kubernetes cluster i am using Nginx as reverse proxy which call the ingress domain using http Now I would like to use https from nginx to backend can i use sub-domains of the root domain which already have SSL certs inside the cluster instead of creating crt and key manually?

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 3 дні тому

      @@mudasir2168 Yes, you can use existing SSL certs from the cluster by exporting them and configuring Nginx to use them for HTTPS.

    • @mudasir2168
      @mudasir2168 3 дні тому

      @@SaiKirannPinapathruni thanks for the quick reply...In my case I have deployed my apps using helm so the import the certs in ingress.yaml file and in the nginx server under proxy pass....correct?

  • @narasimha._sai
    @narasimha._sai 3 дні тому

    what is the use of csi driver ? how it benifits rather than intree provisioning ?

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 3 дні тому

      @@narasimha._sai storage management , dynamic provisioning, compatibility with any storage vendor

  • @maheshwarareddy8629
    @maheshwarareddy8629 4 дні тому

    Hi anna, kindly explain about cni , why we need to install network plugins and how pods would assigned ips

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 4 дні тому

      @@maheshwarareddy8629 Please watch docker networking - in kubernetes also I have explained about networking concepts too

  • @gspvsr
    @gspvsr 4 дні тому

    "Hi Sai, you have not touched Ansible roles; is it not that important?"

  • @VthePeople4156
    @VthePeople4156 4 дні тому

    Ur code is not visible clearly please change settings to make font more Big

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 4 дні тому

      @@VthePeople4156 Sure

    • @VthePeople4156
      @VthePeople4156 4 дні тому

      @SaiKirannPinapathruni bro thanks for replying Future videos should be very accurate as per quality.... please zoom out code when u writting code.... On demand suggestion 😜🙏😜 I think Next videos are very on demand skillset eg... AZURE devops..... Because that reason I am suggesting u for quality

    • @VthePeople4156
      @VthePeople4156 4 дні тому

      For reference ua-cam.com/video/N2GWXuj_IWg/v-deo.htmlsi=mn0SUMRm1no5shLW

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 4 дні тому

      @ Sure bro , Definately

    • @VthePeople4156
      @VthePeople4156 4 дні тому

      ​For reference @@SaiKirannPinapathruniua-cam.com/video/N2GWXuj_IWg/v-deo.htmlsi=mn0SUMRm1no5shLW

  • @aniloruganti-m6t
    @aniloruganti-m6t 4 дні тому

    Awesome session - easy way of understanding, thanks for your efforts.

  • @lohithm9785
    @lohithm9785 4 дні тому

    Hi sai, while going through again to refresh the concepts, just got this doubt, when u mounted the /var/run/docker.sock to ur custom container, was the docker preinstalled (I mean was it mentioned in image), BCS when I did same for nginx container, it says docker command not found in the container while doing docker ps

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 4 дні тому

      @@lohithm9785 Yes we need to restart, or reload . I mentioned in the documentation

  • @vimaladeshmukh4017
    @vimaladeshmukh4017 5 днів тому

    I am yet to start watching this video, however I have one question. Bro. Did you include security concepts as well..?? If yes, please let me know from where we need to start watching that in this video

    • @SaiKirannPinapathruni
      @SaiKirannPinapathruni 4 дні тому

      @@vimaladeshmukh4017 if you are new to Kubernetes please watch from beginning

    • @vimaladeshmukh4017
      @vimaladeshmukh4017 4 дні тому

      @@SaiKirannPinapathruni I am not new to k8s, I am currently working on KSPM tasks , where I need to tighten the security. So wanted to know .whether you covered those topics are not

  • @aniloruganti-m6t
    @aniloruganti-m6t 5 днів тому