You are looking at the documentation of a prior release. To read the documentation of the latest release, please visit here.

KubeVault Overview


KubeVault by AppsCode is a collection of tools for running HashiCorp Vault on Kubernetes.


You can deploy and manage Vault on Kubernetes clusters using KubeVault operator. Using KubeVault operator, you can deploy Vault for following storage backends:

From here you can learn all about Vault operator’s architecture and how to deploy and use Vault operator.

  • Concepts. Concepts explain the CRDs (CustomResourceDefinition) used by Vault operator.

  • Setup. Setup contains instructions for installing the Vault operator in various cloud providers.

  • Monitoring. Monitoring contains instructions for setup prometheus with Vault server

  • Guides. Guides show you how to perform tasks with Vault operator.

  • Reference. Detailed exhaustive lists of command-line options, configuration options, API definitions, and procedures.


Command line interface for KubeVault. This is intended to be used as a kubectl plugin.


Unsealer automates the process of initializing and unsealing HashiCorp Vault instances running.

CSI Driver

KubeVault works seamlessly with Secrets Store CSI driver for Kubernetes secrets.

We’re always looking for help improving our documentation, so please don’t hesitate to file an issue if you see some problem. Or better yet, submit your own contributions to help make our docs better.