Really good tutorial, with all code visible and downloadable. Consul TLS and PKI is a little bit complicated, this is what I needed. I just need to figure out a way to have an Active Directory Root CA, then an AD intermediate one signed by root, and then a Vault CA signed by the intermediate, so that all hosts/services accept the vault one by making them accept the intermediate CA through GPO.
Kapil, thnx for this guide. But I have some questions. How I can use vault PKI for build users certificates for browser and export to p12 format. I was read some information in official vault docs, but i didn't found it.
Hi Kapil, Thanks for sharing the information. I have a usecase where i need to store the gcp app related certs in vault also service accounts into vault. How can i achieve this as we do not need to generate the new certs, just want to save them in vault and need to refer them(certs, service accounts) in k8s deployment? It will be helpful if you can share your insights on this.
