This directory contains detailed documentation for the Vault Sync Operator.
Complete development summary including architecture, features, and implementation details.
Comprehensive guide for deploying the operator across multiple Kubernetes clusters with shared Vault infrastructure.
Intelligent detection and handling of Kubernetes secret changes to optimize performance and reduce Vault load.
Rate limiting, batch operations, and memory optimization features for high-scale deployments.
Complete guide to the GitHub Actions CI/CD pipeline for automated testing, building, and releasing.
The Vault Sync Operator follows standard Kubernetes operator patterns:
┌─────────────────────────────────────────────────────────────┐
│ Kubernetes Cluster │
│ │
│ ┌─────────────────┐ ┌─────────────────┐ │
│ │ Deployment │ │ Secret │ │
│ │ with Vault │ │ with Vault │ │
│ │ Annotations │ │ Annotations │ │
│ └─────────────────┘ └─────────────────┘ │
│ │ │ │
│ │ watches │ │
│ └───────────┼───────────┘ │
│ │ │
│ ┌─────────────────┐ │
│ │ Vault Sync │ │
│ │ Operator │ │
│ └─────────────────┘ │
│ │ │
└───────────────────────┼────────────────────────────────────┘
│
┌─────────────────┐
│ HashiCorp │
│ Vault Server │
└─────────────────┘
The operator watches both Deployments and Secrets with vault-sync.io/path annotations and syncs referenced secret data to Vault using Kubernetes authentication.