Persist Vault audit logs on the host: permissions, HUP, and 90-day rotation
Configure the audit device, container storage, and logrotate separately, then verify that new requests reach the new file after rotation.
Tag · 3 stories
#vault
→
Distribute Registry credentials across namespaces with ClusterExternalSecret
Keep the credential in Vault, select namespaces with labels, and verify both Secret delivery and real image pulls.
Use Vault and External Secrets in Kubernetes
How I sync Vault KV data into Kubernetes Secrets without committing secret values to Git.