|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/hashicorp-vault-production-setup/
课程评论：没有评论
**Coursera 课程总结 - HashiCorp Vault 生产环境部署指南** 本课程由 Site Reliability Engineer (SRE) Tharun 主讲，旨在帮助工程师，特别是 SRE 和系统管理员，掌握 HashiCorp Vault 在生产环境中的安全部署。Vault 作为一款开源的密钥管理工具，对于保护敏感的用户数据（如信用卡信息、政府 ID、电话号码和密码）至关重要。 **课程核心内容：** * **Vault 基础介绍：** 快速了解 Vault 是什么，以及它为何是必需的，课程将使用思维导图进行讲解。 * **Vault 的 Seal 与 Unseal：** 深入理解 Vault 的核心概念——密封（Seal）和解封（Unseal）。 * **开发模式 (Dev Mode) Vault 部署：** 学习如何快速部署开发模式的 Vault 服务器以进行初步实践。 * **开发模式与生产模式对比：** 区分开发模式和生产模式 Vault 服务器的关键差异。 * **生产模式 Vault 部署 (文件存储)：** 详细讲解如何使用文件存储设置生产模式的 Vault 服务器。 * **生产模式 Vault 安全加固：** 学习如何保护生产环境中的 Vault 服务器免受攻击。 * **Vault 用户策略：** 掌握如何配置用户策略以限制访问权限，确保安全性。 * **高可用 (HA) 集群部署 (MySQL 后端)：** 将 Vault 配置为高可用集群，并使用 MySQL 作为后端存储。 * **MySQL 服务器 TLS 配置 (附加内容)：** 作为额外福利，课程还将涵盖如何为 MySQL 服务器设置 TLS 加密。 **目标学员：** 本课程特别适合希望在生产环境中安全部署 HashiCorp Vault 的 Site Reliability Engineers 和系统管理员。课程将重点关注关键的部署流程。 **讲师介绍：** Tharun，一位热衷于知识分享的 Site Reliability Engineer。
As an engineer, one has to implement secure solutions. One such need for the day is securing user data, that too private data like Credit card details, govt ID details, phone numbers and user passwords. As a robust and easy solution to that, we have Hashicorp Vault. Hashicorp Vault is an opensource software from Hashicorp. Vault is used to manage secrets. What is a secret? Secrets can be considered as anything that one uses to authenticate, authorize themselves. Secrets are also pieces of information that are private to any user. In this course:1. We will quickly take a headstart on what Vault is and why we need it. The instructor has used Mind Maps to illustrate about this.2. We will look at what is seal and unseal of Vault3. We will learn how to setup the Dev Mode Vault server to get started quickly4. We will learn the difference between Dev Mode and Prod mode server5. We will learn how to setup the Production Mode Vault server with file storage6. We will learn how to secure Production Mode Vault server from attacks.7. We will learn about the Vault User Policies to restrict access8. We will convert Vault into a High Available Cluster using MySQL backend9. As a bonus you will also learn how to setup MySQL server with TLS.Who is this course for?This course is for Site Reliability Engineers / System Administrators who want to setup a secure and production level Hashicorp Vault server. This course will cover the setup process in detail since that is the crucial part of Hashicorp Vault.About me:Hi, I'm Tharun, a Site Reliability Engineer who is passionate about spreading knowledge.See you inside the course.
