3 ms·
> cobbled together a Hashicorp Vault proof-of-concept and lobbed it over the fence at one of the ops teams. I have seen this twice now. Vault is trivial to ge
by mianos 4y ago
> cobbled together a Hashicorp Vault proof-of-concept and lobbed it over the fence at one of the ops teams.
I have seen this twice now. Vault is trivial to get going and get a POC up, but it is a lot more work (ten times?), getting up properly deployed with working HA, a good structure and good processes in place so it does not become a steaming pile of spaghetti. I probably wrecked my career at one firm spending all the time doing it properly, but it was probably time to leave when they started a project to replace it with Password Manager Pro. :)
- inferiorhuman 4y agoThis was I think more an issue of integrating it with other bits of infrastructure. Things like access control provisioning namespaces. The folks who were on the receiving end of the security team's bullshit were quite capable of getting vault setup but bogged down by mediocre management. I think we ended up using KMS instead (much to the chagrin of everyone).