Tag

#vault

Tagged “vault”

4 articles

Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl

HashiCorp put a Kubernetes KMS v2 plugin for Vault Enterprise into public beta, letting the API server encrypt etcd through the same Vault install that already holds pipeline secrets. It collapses one more custody trail; it does not lower the operational burden on the API server side.

Jul 16, 2026 · Maya Okonkwo Incident response

HCP Vault Dedicated opens cluster DR drills, by support ticket only

HashiCorp put cluster disaster recovery for HCP Vault Dedicated into public preview, giving teams a way to simulate cluster-level failures and prove their failover path. The drill is gated through HashiCorp support, not the customer's own runbook.

Jun 28, 2026 · Maya Okonkwo Security & supply chain

Vault wants your AI agents to ask permission, one request at a time

HashiCorp Vault Enterprise has put a new authorization model for AI agents into public preview, built on OAuth 2.0 Rich Authorization Requests so agents must declare what they want on every call instead of inheriting long-lived secrets. For pipelines that now host coding agents, it changes who is allowed to do what at runtime.

Jun 27, 2026 · Tomás Vega Security & supply chain

Vault learns to speak SPIFFE, and your pipeline's static token is on notice

HashiCorp wired SPIFFE into Vault as both an auth method and a secrets engine, positioning Vault as a workload-identity broker that sits next to SPIRE rather than replacing it. For CI/CD that means one more reason the long-lived bearer token in your job secrets is harder to defend by the day.

Jun 17, 2026 · Tomás Vega