bank-vaults/bank-vaults

Health v2 · maintenance only

Adoption not part of the score

2267 stars · 488 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Bank-Vaults is a CNCF Sandbox umbrella project of tools for cloud-native secret management with Hashicorp Vault. This repository provides the Go CLI that automatically initializes, unseals (via cloud KMS or HSM), and configures Vault on Kubernetes, complemented by Helm charts, a Vault operator, a secret-injection mutating webhook, and a Go SDK.

Use cases

• automatically unseal hashicorp vault on kubernetes
• initialize and configure vault auth methods and secret engines
• inject vault secrets into kubernetes pods as environment variables
• unseal vault using aws kms, azure key vault, or google cloud kms
• deploy a production-ready ha vault instance with helm
• operate vault on kubernetes without manual unseal steps
• renew vault tokens automatically from go applications

When to choose

• You run Hashicorp Vault on Kubernetes and want automated initialization, unsealing, and configuration
• You need to inject Vault secrets directly into pods, config maps, or custom resources
• You want multiple unseal options across cloud KMS providers, HSM devices, or Kubernetes secrets
• You prefer Helm-chart-based, production-ready Vault deployments with HA support

When to avoid

• You don't use Kubernetes or Hashicorp Vault, since the tooling is specific to that stack
• You need a general-purpose secrets manager rather than Vault orchestration tooling
• You want a fully managed secret store without self-operating Vault instances
• You only need a simple secrets client and don't require operator, webhook, or CLI automation

Facets

cli-tool · maturity active

secrets-management security cli configuration-management deployment security cloud-computing self-hosted go cli cloud self-hosted hashicorp-vault vault-unsealing secret-injection mutating-webhook kubernetes-operator helm-chart cncf-sandbox cloud-kms hsm istio secret-engines auth-methods devops containers kubernetes docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bank-vaults/bank-vaults")