Reader small image

You're reading from  HashiCorp Packer in Production

Product typeBook
Published inJul 2023
PublisherPackt
ISBN-139781803246857
Edition1st Edition
Right arrow
Author (1)
John Boero
John Boero
author image
John Boero

John Boero has 20 years of experience in the tech industry covering engineering, consulting, architecture, and pre-sales. He comes from Chicago, IL in the USA but currently lives in London, UK. He has worked for Red Hat, Puppet, and HashiCorp and remains active in the open source community. All commissions for this book will be donated to the Raspberry Pi Foundation non-profit to encourage coding and computing skills for kids.
Read more about John Boero

Right arrow

Using HashiCorp Vault integration for automation

When you use Packer in pipelines it may be useful to add HashiCorp Vault for short-lived credentials. When building cloud images, shouldn’t each build pipeline use its own cloud credentials and purge them afterward? What if Packer or part of the pipeline fails and doesn’t get a chance to revoke any credentials used? HashiCorp Vault is there to rotate and revoke your unused credentials.

If the runner service you select is a VM within the cloud, then Packer may automatically use the service account presented to the VM itself. In this case, there may be no need to use Vault credentials. AWS, Azure, and GCP all support this option. If you are using a local runner or building for multicloud, Vault is the best way to provide secure credentials for Packer pipelines.

This section builds on the Vault discussions from Chapter 3, Configuring Builders and Sources. It assumes a basic knowledge of HashiCorp Vault but focuses solely...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
HashiCorp Packer in Production
Published in: Jul 2023Publisher: PacktISBN-13: 9781803246857

Author (1)

author image
John Boero

John Boero has 20 years of experience in the tech industry covering engineering, consulting, architecture, and pre-sales. He comes from Chicago, IL in the USA but currently lives in London, UK. He has worked for Red Hat, Puppet, and HashiCorp and remains active in the open source community. All commissions for this book will be donated to the Raspberry Pi Foundation non-profit to encourage coding and computing skills for kids.
Read more about John Boero