Using Hashicorp Vault with Spring-Boot

Slides from my DevDay 2018 talk in Dresden.

Transcript

1. SECURING SPRING-BOOT Applications with Hashicorp Vault DevDay -- Dresden, 24.04.2018 Jan Dittberner DevDay – Dresden, 24.04.2018 1
2. Jan Dittberner Software architect Topics: Linux, PKI, Automation, … Debian Developer Infrastructure team lead CAcert.org Jan Dittberner DevDay – Dresden, 24.04.2018 2
3. WHAT IS SPRING BOOT? Framework für schnellen Start von Java/Spring-basierten Anwendungen Convention over Configuration Autoconfiguration für eine Vielzahl von Frameworks Convenience für Deployment und Betrieb Umfangreiche Referenzdokumentation und Guides Jan Dittberner DevDay – Dresden, 24.04.2018 3
4. WHAT IS VAULT? HashiCorp Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, and auditing. Through a unified API, users can access an encrypted Key/Value store and network encryption-as-a-service, or generate AWS IAM/STS credentials, SQL/NoSQL databases, X.509 certificates, SSH credentials, and more. Jan Dittberner DevDay – Dresden, 24.04.2018 4
5. DEMO Jan Dittberner DevDay – Dresden, 24.04.2018 5
6. DEMO VAULT AND SPRING-BOOT, TOKEN AND APPROLE AUTHENTICATION Jan Dittberner DevDay – Dresden, 24.04.2018 6
7. DEMO DYNAMIC X.509 CERTIFICATES FROM VAULT PKI Jan Dittberner DevDay – Dresden, 24.04.2018 7
8. DEMO DYNAMIC DATABASE CREDENTIALS FROM VAULT DATABASE ENGINE Jan Dittberner DevDay – Dresden, 24.04.2018 8
9. CODE, Q & A https://github.com/jandd/spring-boot-vault-demo Jan Dittberner DevDay – Dresden, 24.04.2018 9
10. CONTACT Jan Dittberner T-Systems Multimedia Solutions GmbH Mail: jan.dittberner@t-systems.com Twitter: @jandd https://coffeestats.org/ Jan Dittberner DevDay – Dresden, 24.04.2018 10