Skip to content
masterclass Buddy
Start learning

DevOps · Concept

Tekton

Secure Tekton secrets by using Kubernetes workload identity with Vault and least-privilege policies. Use HCP Vault Radar in Tekton to scan repositories, report findings, or fail a pipeline when new secrets are found.

Last updated

Syntax

vault write auth/kubernetes/login role=<role> jwt=@/var/run/secrets/kubernetes.io/serviceaccount/token

In-depth API docs are only for subscribers: parameters, examples, common mistakes and interview practice.

Subscribe
  • Kubernetes auth
  • JWT/OIDC auth
  • TLS certificate auth
  • AppRole auth
  • Vault policies
  • Response wrapping
  • Vault Agent on Kubernetes
  • HCP Vault Radar

Source: Secure Tekton CI/CD secrets with HashiCorp Vault | Well-Architected Framework | HashiCorp Developer. Checked 2026-11-03.