Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

This is Part 2 of the Hashicorp Vault series. Part 1 covered bootstrapping and configuring HashiCorp Vault (the one-time terraform-admin work) and the design goals for Zero Trust secrets management.

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 16 Nov 2025 00:00:00 +0000

In the last two parts of the On-Premise 101 series, I showed you how to provision and bootstrap a full Kubernetes cluster. Now, I’m tearing part of it down and rebuilding the entire workflow. Why? The project’s goal was always automation, but I hit a wall. The manual steps to set up that automation - like managing secrets and SSH keys - became a huge liability.

github-actions on /home/fel1x

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management