# bank-vaults/bank-vaults

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

Repository: https://github.com/bank-vaults/bank-vaults
Canonical: https://ross.abutalabs.com/products/bank-vaults
Homepage: https://bank-vaults.dev
Language: Go
License: Apache-2.0
License Family: permissive
Topics: vault, kubernetes, kubernetes-secrets, golang, security, vault-operator, operator, unseal, alibaba-cloud, google-cloud, amazon, azure, mutating-webhook, secret, vault-client, vault-unsealing, helm-chart, istio, hsm
Last push: 2026-08-24T08:56:23+00:00

## Health v2 (maintenance only)
Score: 86/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 61, longevity 100
- inputs: {"age_days": 3101, "days_push": 9, "days_rel": 100, "gap_med": 120.5, "n_releases_24m": 7}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2267, forks 488 (observed 2026-08-28T04:06:32.787237+00:00)

## What it is
Bank-Vaults is a CNCF Sandbox umbrella project of tools for cloud-native secret management with Hashicorp Vault. This repository provides the Go CLI that automatically initializes, unseals (via cloud KMS or HSM), and configures Vault on Kubernetes, complemented by Helm charts, a Vault operator, a secret-injection mutating webhook, and a Go SDK.

## Use cases
- automatically unseal hashicorp vault on kubernetes
- initialize and configure vault auth methods and secret engines
- inject vault secrets into kubernetes pods as environment variables
- unseal vault using aws kms, azure key vault, or google cloud kms
- deploy a production-ready ha vault instance with helm
- operate vault on kubernetes without manual unseal steps
- renew vault tokens automatically from go applications

## When to choose
- You run Hashicorp Vault on Kubernetes and want automated initialization, unsealing, and configuration
- You need to inject Vault secrets directly into pods, config maps, or custom resources
- You want multiple unseal options across cloud KMS providers, HSM devices, or Kubernetes secrets
- You prefer Helm-chart-based, production-ready Vault deployments with HA support

## When to avoid
- You don't use Kubernetes or Hashicorp Vault, since the tooling is specific to that stack
- You need a general-purpose secrets manager rather than Vault orchestration tooling
- You want a fully managed secret store without self-operating Vault instances
- You only need a simple secrets client and don't require operator, webhook, or CLI automation

## Facets
- artifact type: cli-tool
- maturity: active
- function: secrets-management, security, cli, configuration-management, deployment
- domain: security, cloud-computing, self-hosted
- platform: go, cli, cloud, self-hosted
- tags: hashicorp-vault, vault-unsealing, secret-injection, mutating-webhook, kubernetes-operator, helm-chart, cncf-sandbox, cloud-kms, hsm, istio, secret-engines, auth-methods, devops, containers, kubernetes, docker

## Member repositories
- bank-vaults/bank-vaults (main) score 86

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:32.787237+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:42:10.829142+00:00, confidence not recorded.
  - readme: https://github.com/bank-vaults/bank-vaults (fetched 2026-08-28T04:06:32.787237+00:00, sha 1e55eaf03921)
  - homepage: https://bank-vaults.dev (fetched 2026-08-29T10:22:32.056188+00:00, sha 62ee0c494536)
  - site_page: https://bank-vaults.dev/docs/community (fetched 2026-08-29T10:22:32.067492+00:00, sha 89f0fd00b898)
  - site_page: https://bank-vaults.dev/docs (fetched 2026-08-29T10:22:32.065761+00:00, sha 06b4bd89f317)
  - site_page: https://bank-vaults.dev/docs/blog (fetched 2026-08-29T10:22:32.069092+00:00, sha 8d763ba4342d)
  - site_page: https://bank-vaults.dev/docs/installing (fetched 2026-08-29T10:22:32.070752+00:00, sha 2e8293f9b17b)
- Data as of 2026-08-30T08:39:29.467469+00:00.