HashiCorp Vault

18 engineers on Hacker News describe using HashiCorp Vault first-hand: 4 endorse it, 2 regret it, 1 are mixed.

62%trust
18first-hand users
17in production
endorse 4mixed 1regret 2uses, no opinion

“If you're using Consul and Vault, good luck - you have to integrate all of that into whatever mess you've built.”

regret · production · raffraffraff · 2024-11-27 · source ↗ · wrong label?

“We use consul/vault/nomad at $DAYJOB. It's been a mostly stable platform for us.”

endorse · production · wingmanjd · 2023-12-09 · source ↗ · wrong label?

“We've switched to them based on Hashicorp Vault and I think they are an improvement in security and convenience.”

endorse · production · tetha · 2023-09-22 · source ↗ · wrong label?

“I ended up as the only person in the company that knew how to use it and therefore it became a burden very quickly. We switched to EnvKey”

regret · production · drcongo · 2023-03-06 · source ↗ · wrong label?

“managing a nomad, consul and vault cluster is easy for us.”

endorse · production · zie · 2020-10-23 · source ↗ · wrong label?

“at my org we use AWS IAM auth... which is how we enforce MFA for Vault without paying the crazy enterprise pricing”

mixed · production · rwiggins · 2018-12-04 · source ↗ · wrong label?

“We use Vault in our environment and deployments... Vault has a concept of using tokens for authentication to pull secrets.”

endorse · production · nightbrawler · 2018-12-04 · source ↗ · wrong label?

“I have 5 vault clusters to secure, and 5 different CI builds every 10 minutes or so”

neutral · production · tetha · 2026-04-21 · source ↗ · wrong label?

“9x Pi 4B-equivalent ARM SBCs: 3x consul + 3x vault + 3x nomad server.”

neutral · personal · baobun · 2023-12-23 · source ↗ · wrong label?

“We're using Vault to create ephemeral database credentials for our services that are rotated every other hour”

neutral · production · denvrede · 2022-09-30 · source ↗ · wrong label?

“We have a few applications that use vault in a much more in-depth way than fetching a couple of secrets”

neutral · production · xmodem · 2021-12-11 · source ↗ · wrong label?

“We use Hashicorp Vault for bigger systems.”

neutral · production · cygned · 2021-04-05 · source ↗ · wrong label?

“configure apps via some mixture of pre-baked amis, docker files and some sort of parameter store. (Usually SSM or Vault).”

neutral · production · ic0n0cl4st · 2021-03-11 · source ↗ · wrong label?

“secrets should only be issued, created, stored and distributed by the secret management system, vault in our case.”

neutral · production · tetha · 2020-12-14 · source ↗ · wrong label?

“we also use Hashicorp Vault's SSH Key Certificates functionality to make sure our SSH keys are short-lived when we run it from CI.”

neutral · production · jturpin · 2019-11-19 · source ↗ · wrong label?

“we use Vault for (among other things) authentication between internal services”

neutral · production · _jal · 2018-12-05 · source ↗ · wrong label?

“I had to kill a rollout of Vault at one billion dollar (revenue) company for the following reasons”

neutral · production · captainperl · 2018-12-04 · source ↗ · wrong label?

“we use Vault at my current company (which I haven't even used directly yet)”

neutral · production · imauld · 2018-04-22 · source ↗ · wrong label?