HashiCorp Vault Integration

HashiCorp Vault Integration with TigerTrust

TigerTrust provides deep integration with HashiCorp Vault, enabling enterprises to leverage Vault's powerful PKI capabilities while gaining centralized visibility, policy management, and compliance reporting.

PKI Secrets Engine Integration

TigerTrust connects directly with Vault's PKI secrets engine:

# Configure Vault PKI in TigerTrust
tigertrust vault configure \
  --vault-addr "https://vault.example.com:8200" \
  --auth-method kubernetes \
  --role "tigertrust-admin" \
  --pki-mount "pki" \
  --namespace "enterprise"

Centralized Certificate Visibility

TigerTrust provides visibility into all Vault-issued certificates:

• Certificate Inventory: Track all certificates issued by Vault PKI
• Expiration Monitoring: Alerts for expiring certificates
• Usage Analytics: Understand certificate distribution and usage
• Audit Trails: Complete history of certificate operations

Policy Management

Define and enforce certificate policies across Vault:

# Vault policy for TigerTrust integration
path "pki/issue/web-certs" {
  capabilities = ["create", "update"]
  allowed_parameters = {
    "common_name" = ["*.example.com"]
    "ttl" = ["720h"]
  }
}

path "pki/certs" {
  capabilities = ["list"]
}

path "pki/cert/*" {
  capabilities = ["read"]
}

Dynamic Certificate Issuance

Automate certificate issuance with TigerTrust policies:

# TigerTrust Certificate Request
apiVersion: tigertrust.io/v1
kind: CertificateRequest
metadata:
  name: api-service-cert
spec:
  issuer:
    type: vault
    mount: pki
    role: api-services
  commonName: api.internal.example.com
  altNames:
    - api.internal.example.com
    - api-service.default.svc.cluster.local
  ttl: 720h
  autoRenew: true
  renewBefore: 168h

Secrets Synchronization

Sync certificates between Vault and other secret stores:

• Kubernetes Secrets
• AWS Secrets Manager
• Azure Key Vault
• GCP Secret Manager

Namespace Support

For Vault Enterprise with namespaces:

• Discover certificates across namespaces
• Apply policies per namespace
• Cross-namespace certificate management
• Namespace-aware access control

Transit Engine Integration

Use Vault Transit for cryptographic operations:

• Certificate signing with Transit-managed keys
• Key rotation management
• HSM-backed cryptographic operations

High Availability

TigerTrust supports Vault HA deployments:

• Automatic leader detection
• Failover handling
• Performance standby support
• Disaster recovery cluster integration

Compliance & Audit

Maintain compliance with Vault-managed certificates:

• Complete audit trail of certificate operations
• Policy violation detection
• Compliance reporting for regulatory requirements
• Integration with SIEM systems

Achieve enterprise PKI management with HashiCorp Vault and TigerTrust.