Skip to the content.

Open Vault Agent Injector (OVAI)

Open Vault Agent Injector allows to dynamically inject HashiCorp Vault Agent as either an init or a sidecar container, along with configuration and volumes, in any matching pod manifest to seamlessly fetch secrets from Vault. Pods willing to benefit from this feature just have to add some custom annotations to ask for the injection at deployment time.

Notice: I am the author of the original Talend's Vault Sidecar Injector component and only contributor for 3 years. Not being a Talend employee anymore, this fork is the place where I add new features and fix issues.

Announcements

Kubernetes compatibility

Open Vault Agent Injector can be deployed on Kubernetes 1.12 and higher. Deployment on earlier versions may work but has not been tested.

Usage

Installation

Observability

List of changes

Look at changes for Open Vault Agent Injector releases in CHANGELOG file.

Contributing

Feel free to create issues or submit pull requests.

License

This project is licensed under the terms of the Apache 2.0 license.