HashiCorp Vault 202 for Operators
In this course, you'll learn everything you need to know to become a Vault expert. From the basics of secrets management to advanced topics like multi-datacenter replication and disaster recovery, we've got you covered.
Why This Course is Different
Get everything you need to master platform engineering and advance your career
Certificate of Completion
Earn a certificate while gaining real-world skills that go beyond traditional certification prep
Hands-on Labs
0 practical labs with real-world scenarios in pre-configured cloud environments
Expert-Led
Learn from Sam Gabrail, Former HashiCorp Sr. Solutions Engineer with 15+ years experience
Community Support
Join our community where members help each other and collaborate on learning
What You'll Master
Deploy and operate production-ready Vault clusters
Implement advanced authentication and authorization
Configure monitoring and backup strategies
Set up enterprise replication and disaster recovery
Integrate Vault with Kubernetes and Terraform
Troubleshoot common operational issues
Course Curriculum
SECTION 1 – COURSE INTRODUCTION
Learn about course introduction
- •Important Note on Lab Environments
- •Intro
- •Code Repository
- •Community
- •env zero Setup
- •What we will build
SECTION 2 – TERRAFORM CRASH COURSE
Learn about terraform crash course
- •Intro
- •Terraform Overview
- •01-Basic-Commands
- •02-Lock-and-State-Files
- •03-Variables
- •04-Variables-Continued
- •05-AWS-Setup-and-Outputs
- •06-Data-Blocks
- •07-Another-Provider
- •08-Modules
- •09-A-Web-Server
SECTION 3 – VAULT CRASH COURSE
Learn about vault crash course
- •Intro
- •What is HashiCorp Vault
- •Vault Use Cases
- •Basic Vault CLI Commands
- •Vault Server Modes
- •Vault Architecture Internals
- •Vault Seal and Unseal
- •The Configuration File
- •Run a Production Vault Server Lab
- •Authentication Methods Overview
- •Types of Auth Methods
- •Vault Policies Overview
- •Vault Tokens Overview
- •Secrets Engines Overview
- •Replication Design with DR and PR
- •The Vault Agent Overview
- •Vault Crash Course AssessmentQuiz
SECTION 4 – INSTALL A PRODUCTION READY VAULT OSS CLUSTER
Learn about install a production ready vault oss cluster
- •Vault with Integrated Storage Overview
- •Reference Architecture for Integrated Storage
- •Deploy a Production OSS Cluster
- •Deployment Walk-through
- •Initialize the Vault Cluster
- •Access via SSM
- •Terraform Walk-Through
- •Terraform Walk-Through
- •Terraform Walk-Through
- •Re-Deploy the Cluster with Private CAs
- •Deploy with no Bastion Host
- •Deploy in Air-Gapped
- •I need your help
SECTION 5 – AUTOMATIC BACKUPS
Learn about automatic backups
- •Raft Snapshots
- •The Automated Backup Process
- •Deploy the Backup Resources
- •Terraform Walk-Through
- •Restoring Vault from a Snapshot
- •What does the snapshot restore?
SECTION 6 – MONITORING
Learn about monitoring
- •Vault Telemetry and Logs
- •Deploy Vault Monitoring
- •Using Datadog
- •Deployment Walk-through
- •Monitoring AssessmentQuiz
SECTION 7 – BACKEND MIGRATION AND UPGRADES
Learn about backend migration and upgrades
- •Consul Backend Overview
- •Backend Migration Process
- •Rekey Vault and Rotate Encryption Keys
- •Regenerate a Root Token
- •Upgrading a Vault HA Cluster
SECTION 8 – MANAGING NAMESPACES
Learn about managing namespaces
- •Namespaces Overview
- •Deploy an Enterprise Vault Cluster
- •Namespaces in Action
- •Namespaces Best Practices
SECTION 9 – REPLICATION
Learn about replication
- •High Availability Architecture in Vault Enterprise
- •DR and PR Whiteboard
- •Deploy a Highly Available Enterprise Cluster across Regions
- •Terraform Code Walk-Through
- •Automating DNS Failover
- •Failover Demo
- •Replication AssessmentQuiz
SECTION 10 – THE TERRAFORM VAULT PROVIDER
Learn about the terraform vault provider
- •Provider Overview
- •Using the Provider for Vault Configurations
- •Don-t Use the Provider for Secrets
SECTION 11 – DEPLOYING VAULT IN KUBERNETES
Learn about deploying vault in kubernetes
- •Use Terraform to Deploy an EKS Cluster with Vault
- •Get Vault Started
- •Test Vault HA in K8s
- •Backup and Restore Vault in K8s
- •Monitoring Vault in K8s
- •Upgrading Vault in K8s
SECTION 12 – ADVANCED VAULT AUTHENTICATION TOPICS
Learn about advanced vault authentication topics
- •Section 12 Authentication Review
- •AD LDAP Auth Method
- •MFA
- •OIDC Auth Method
- •The Secret Zero Problem
- •AWS SSM Setup
- •AWS SSM Agent in a Linux Machine
- •AWS SSM Agent in a Windows Machine
- •AWS SSM Agent Config Walk through
- •Advanced Vault Authentication Topics AssessmentQuiz
SECTION 13 – BONUS
Learn about bonus
- •Vault OSS to Enterprise Migration
- •Day 2 Operations Lesson 1
- •Day 2 Operations Lesson 2
- •Gotchas and Caveats
- •Troubleshooting Techniques
SECTION 14 – CLOSING REMARKS AND NEXT STEPS
Learn about closing remarks and next steps
- •Closing Remarks
- •I need your help
Course Features
Hands-on Labs
Lots of hands-on labs to learn by doing
Join our Community
Community support to ask questions and collaborate
Test Your Knowledge
Quizzes to help you grasp the material well
See what others are saying about our Courses
“Dear Sam, I hope this email finds you well. If you remember before the end of last year I register for one your courses Terraform 101 – Certified Terraform Associate, I must admit that I learned a lot even though I was not patient enough for all videos to be available. All in all I enjoy the way you structured the course and how you went through it. The main reason of this email, to send you my gratitude for the content you created and to let you know that I passed my exam/test last week.”
“This course was a perfect introduction to Terraform and Infrastructure as Code. Loved the gitpod, saving me a lot of time for developer environment setup. We have a project at work where we want to go from a click-ops version of server-deploy to a more automated flow using ci/cd and terraform for deploying virtual servers.”
“I want to thank you for such wonderful courses. They are more comprehensive than other courses I have taken in the past. You take the time to explain every detail of the code and what it does exactly, further enforcing your student's understanding and confidence in what they are learning. Your methods are very effective and set you apart from other instructors.”
Choose your plan
Simple, Transparent Pricing
One price, everything included
Monthly Plan
Access all content
Quarterly Plan
Save 16% with quarterly billing
Everything Included in Your Subscription
Content & Learning
- Access to all courses and bootcamps
- Video lessons with closed captions
- Interactive quizzes and assessments
- Course completion certificates
Hands-On Labs
- Browser-based cloud labs
- Pre-configured VMs ready to use
- Playgrounds for experiments
- Multi-VM realistic scenarios
AWS Integration
- Managed AWS Account included
- Pre-configured environments
- Real-world cloud scenarios
Support & Community
- Priority support
- Active community forum
No Setup Required
- Everything runs in your browser
- No software installation needed
- Automatic environment provisioning
- Works on any device
Hi there, I'm Sam
I'm a husband and father of two wonderful boys. I'm also very passionate 🔥 about all things technology. From when I was 10, I had a dream to become a computer 💻 engineer one day. Here I am today living the dream!
Thanks for visiting TeKanAid Academy. My goal is to teach you all things DevOps. Below are some of the things I've done over the years. I'm confident that I can help you achieve your dreams too.
- 15+ years of experience in various Information Technology fields from Telecommunications, Computer Networks, Digital Transformation, DevOps, Cybersecurity, and IoT
- President of TeKanAid Solutions Inc. building online content in the DevOps space
- Previous – Sr. Solutions Engineer at HashiCorp
View my Certifications
Terraform: Authorized HashiCorp Instructor
Verify my certificate
HashiCorp Authorized Instructors are experienced DevOps professionals who deliver official HashiCorp training courses in person and virtually.
Issued by HashiCorp Partner Network (HPN)
Vault: Authorized HashiCorp Instructor
Verify my certificate
HashiCorp Authorized Instructors are experienced DevOps professionals who deliver official HashiCorp training courses in person and virtually.
Issued by HashiCorp Partner Network (HPN)
HashiCorp Certified: Terraform Associate (002)
Verify my certificate
Earners of the HashiCorp Certified: Terraform Associate certification know the basic concepts, skills, and use cases associated with open source HashiCorp Terraform.
Issued by HashiCorp
HashiCorp Certified: Vault Associate (002)
Verify my certificate
Earners of the HashiCorp Certified: Vault Associate certification know the basic concepts, skills, and use cases associated with open source HashiCorp Vault.
Issued by HashiCorp
Featured Products
Backstage 101: Building Internal Developer Portals
Build Internal Developer Portals with Backstage using the 5 core pillars: Catalog, Templates, TechDocs, Auth, and Search
Learn More →
Crossplane 101: Platform Engineering with Cloud-Native Infrastructure as Code
Build Internal Developer Platforms with Crossplane that enable self-service AWS infrastructure provisioning through Kubernetes APIs
Learn More →
HashiCorp Sentinel 101
Master HashiCorp Sentinel for policy as code, governance, and compliance in Terraform workflows.
Learn More →
30-Day Money-Back Guarantee
Try it risk-free
I'm confident you'll get everything you need from this course and be 100% satisfied. But in the unlikely event you decide it's not for you just ask for a refund any time during the first 30 days and you'll get your money back with no questions asked.