PGCon2016 - 1.1.35

PGCon 2016
The PostgreSQL Conference

Speakers
Sean Chittenden
Schedule
Day Tutorials - Day 2 - Developer Unconference - 2016-05-18
Room MRT 251
Start time 13:00
Duration 03:00
Info
ID 976
Event type Workshop
Track Tutorial
Language used for presentation English
Feedback

Setting up Vault for HA PKI and Secrets management...

Secure access to PostgreSQL, simplified

This session will provide an in-depth walkthrough on how to setup Vault for use of securing the access of applications talking to PostgreSQL instances (both credentials and SSL certs) in a way that provides both revocability, auditability, and high-availability.

This session will provide an in-depth walkthrough on how to setup Vault for use of securing the access of applications talking to PostgreSQL instances (both credentials and SSL certs) in a way that provides both revocability, auditability, and high-availability. This talk will include:

) An in-depth tutorial for setting up consul and Vault in an HA cluster ) Setting up an "App ID" Backend ) Setting up a PKI backend ) Integration of the "App ID" Backend into sample applications (JDBC, Rails, Python, and Go) ) Benefits for administrators and Security Officers of the App ID backend ) SSL Cert Management for encrypted connections from app hosts to databases *) High-availability for failover of Vault and PostgreSQL across multiple data centers