KubeDB
Run Production-Grade Databases on Kubernetes
Stash
Backup and Recovery Solution for Kubernetes
KubeVault
Run Production-Grade Vault on Kubernetes
Voyager
Secure Ingress Controller for Kubernetes
ConfigSyncer
Kubernetes Configuration Syncer
Guard
Kubernetes Authentication WebHook Server
KubeDB simplifies Provisioning, Upgrading, Scaling, Volume Expansion, Monitor, Backup, Restore for various Databases in Kubernetes on any Public & Private Cloud
- Lower administrative burden
- Native Kubernetes Support
- Performance
- Availability and durability
- Manageability
- Cost-effectiveness
- Security
A complete Kubernetes native disaster recovery solution for backup and restore your volumes and databases in Kubernetes on any public and private clouds.
- Declarative API
- Backup Kubernetes Volumes
- Backup Database
- Multiple Storage Support
- Deduplication
- Data Encryption
- Volume Snapshot
- Policy Based Backup
KubeVault is a Git-Ops ready, production-grade solution for deploying and configuring Hashicorp's Vault on Kubernetes.
- Vault Kubernetes Deployment
- Auto Initialization & Unsealing
- Vault Backup & Restore
- Consume KubeVault Secrets with CSI
- Manage DB Users Privileges
- Storage Backend
- Authentication Method
- Database Secret Engine
Secure Ingress Controller for Kubernetes
- HTTP & TCP
- SSL
- Platform support
- HAProxy
- Prometheus
- Let's Encrypt
Kubernetes Configuration Syncer
- Configuration Syncer
Kubernetes Authentication WebHook Server
- Identity Providers
- CLI
- RBAC
RESOURCES
Blog
Docs
Webinars
Learn
Demos
Webinar New

New to KubeVault? Please start here.

mode.kubernetesSecret

To use kubernetesSecret mode specify mode.kubernetesSecret. In this mode, unseal keys and root token will be stored in a Kubernetes secret.

spec:
  unsealer:
    mode:
      kubernetesSecret:
        secretName: <secret_name>

mode.kubernetesSecret has the following fields:

kubernetesSecret.secretName

kubernetesSecret.secretName is a required field that specifies the name of the Kubernetes secret. If this secret does not exist, then Unsealer will create it. The secret will be created in the same namespace of VaultServer.

spec:
  unsealer:
    mode:
      kubernetesSecret:
        secretName: "vault-keys"

Improve This Page