Open Vault Agent Injector allows to dynamically inject HashiCorp Vault Agent as either an init or a sidecar container, along with configuration and volumes, in any matching pod manifest to seamlessly fetch secrets from Vault. Pods willing to benefit from this feature just have to add some custom annotations to ask for the injection at deployment time.
Notice: I am the author of the original Talend's Vault Sidecar Injector component and only contributor for 3 years. Not being a Talend employee anymore, this fork is the place where I add new features and fix issues.
- 2021-11: 1.0.1 release with fix to preserve annotations
- 2021-09: First Open Vault Agent Injector release!
- 2020-06: Inject secrets in your pod as environment variables
- 2020-03: Static vs Dynamic secrets
- 2019-12: Discovering the Vault Proxy feature
Open Vault Agent Injector can be deployed on Kubernetes 1.12 and higher. Deployment on earlier versions may work but has not been tested.
Look at changes for Open Vault Agent Injector releases in CHANGELOG file.
Feel free to create issues or submit pull requests.
This project is licensed under the terms of the Apache 2.0 license.