Vault CSI Provider for Kubernetes Secret Mounting

This hands-on lab teaches you how to use the Vault CSI Provider as an alternative to the Agent Injector for providing secrets to Kubernetes applications.

You'll learn to:

• Reconfigure Vault to enable CSI Provider instead of Agent Injector
• Install and configure the Secrets Store CSI Driver
• Create SecretProviderClass resources for Vault integration
• Mount Vault secrets directly into pod filesystems
• Compare CSI Provider vs Agent Injector approaches
• Understand when to use each secret delivery method
• Troubleshoot CSI volume mounting issues

This lab demonstrates an alternative approach to Kubernetes secret management using CSI volumes for direct secret mounting.