Terraform module to populate AWS Systems Manager (SSM) Parameter Store with values from Terraform. Works great with Chamber.

An example pipeline for executing HashiCorp Terraform with ephemeral cloud provider credentials managed by HashiCorp Vault

Running your own (serverless) HashiCorp Vault server using Google Cloud's Cloud Run

Terraform module to configure Vault for GitHub OIDC authentication from Action runners.

Cloud native config management.

Terraform module which creates service principals (SPN) in Azure AD, assign role assignments in Azure and creates service connections in Azure DevOps. And, not least, you have the option to automatically rotate the client secret.

Easy SSH with Vault & GitHub auth on AWS

A demo of HashiCorp Vault with multiple use cases, deployable on almost any platform.

Experiments in secure node enrollment

Example repository for the subsidiary pattern

Main Repo for Talks

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Secrets Management Process in Cybersecurity.

This repo demonstrates how to fetch secrets from Azure Key Vault using the Kubernetes External Secrets operator. It leverages OIDC authentication and Azure Workload Identity to securely access the vault from within a Kubernetes cluster. The implementation uses K3d, OpenTofu, and Terragrunt for infrastructure provisioning, showcasing GitOps practice

Example Lambda native and container application deployments leveraging Skroutz's aws-lambda-secrets extension for AWS SecretsManager

Production-ready Nomad job for deploying n8n Workflow Automation with external MariaDB support, secret-injection using Nomad Variables, and a clean service-oriented architecture. Includes dev-mode demo using Nomad + Consul.

Configuration for simple file-based Vault

An opinionated Terraform module used to manage GitHub Actions secrets and variables at different scopes

Encrypting secrets with KMS when transferring keys to the COI VM container in Yandex Cloud.

Развертывание IdP KeyCloak с хранением и получением пар логин/пароль через сервис Yandex Cloud Lockbox.