Toolbox
June 10

Extension unlocked: Granular secret (service) distribution with HashiCorp Vault

Airflow is a free love advocate. Add a connection/variable, and it'll get shared between all! But what about security? Segregation? Here comes Python (and Hashicorp Vault) to save the day.

HashiCorp Vault offers a robust solution for secret segregation through App roles. But what happens when a centralized agent (like Airflow) handles requests for multiple clients? Should it retain all the App roles? Should this logic even reside on the client side?

Enter Secret-Service—a Python service that embodies centralized logic for seamless Vault secrets management. Clients approach with an ownership tag, and Secret-Service takes care of the rest.

Join us to explore the logic defined within the Secret-Service and discover how you can leverage it for a streamlined, centralized approach to distributing and segregating Vault secrets.

Hila Fish
Senior DevOps Engineer, International Public Speaker
Hila Fish

Register for PlatformCon 2025

Connect with fellow platform practitioners, learn from the best in the industry and engage directly with speakers on Slack.
Community
Join over 20k platform engineers from all over the world
Slack
Share best practices, discuss new trends and tooling with 20k+ platform practitioners
Speakers
Engage with 200+ speakers in dedicated channels or directly in DMs