lawnjarae/github-vault-terraform-demo

Building Security into Enterprise CI/CD Pipelines

In this demo, learn how HashiCorp can secure and accelerate your CI/CD pipelines with the HashiCorp Cloud Platform on top of GitHub.

The Demo Covers:

GitHub Actions and Terraform Cloud for Business (TFC-B)

• GitHub Actions calling Terraform Cloud
• Fine grained access control from GitHub Actions to TFC-B
• Terraform Cloud retrieving AWS credentials via OIDC
• Provisioning infrastructure

GitHub Actions and HCP Vault

• Triggered by code change
• GitHub Actions OIDC communicates with Vault/Terraform Cloud (without passwords)
• GitHub Actions workflow calls out to HCP Vault to retrieve secrets.

📚 Resources

• Slides Building Security into Enterprise CI/CD Pipelines
• Case Study: How GitHub uses HashiCorp
• White Paper: Cloud Operating Model
• Blog: How to build a consistent workflow for development and operations teams

🧭 Guides

• Setting up TFC integration w/ GitHub Actions
• Setting up Vault with GitHub Actions
• A Practioner’s Guild to Using HashiCorp Terrform Cloud w/ GitHub