The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
See full terms...
Vault in Production
Operating HashiCorp Vault and OpenBao After Day One
This book is 100% completeLast updated on 2026-10-14
Day two of HashiCorp Vault and OpenBao, measured: restore with a stopwatch, upgrade without an outage window, break the audit device, put the seal in an HSM - and keep the runbook page each lab leaves behind.
Minimum price
$14.99
$24.99
You pay
Author earns
PDF
EPUB
About
About the Book
Your Vault installation has been running for two years. Eleven services depend on it. Nobody has restored it from a snapshot since the day it was built.
That is the situation this book is about. Not how Vault works - you already know that, or the first book in this series taught you. What comes after: the cluster that has been quietly accumulating state, the runbook nobody has rehearsed, and the numbers in your recovery plan that no one has ever measured.
Twenty-one chapters, and almost every figure in them was produced by breaking something on purpose and writing down what happened. Restore a snapshot onto a host that has never held the seal, with a stopwatch running. Watch a routine pod restart in Kubernetes take your failure tolerance to zero without producing a single error. Break the only audit device and find that the cluster cannot be repaired through Vault at all. Measure what a lease costs in storage, revoke every one of them, and watch the disk stay full. Prove that the most commonly recommended Vault alert fires on a perfectly healthy leader. And put the seal in a hardware security module, count every PKCS#11 call it makes, and find out what an HSM costs per request (nothing), per restart, and on the day it is gone.
Every number carries its provenance: Appendix C lists them all with how much weight each will carry. Every chapter ends in a runbook fragment with blanks where your names, numbers and dates go. And the companion repository runs every lab as a script, on Docker or rootful podman, with 16 GB of RAM and no cloud account. The book ends with a 66-point production readiness review you run before go-live.
HashiCorp and Vault are trademarks of HashiCorp, Inc. OpenBao is a project of the Linux Foundation. This book is an independent publication and is not affiliated with, authorized by, or endorsed by any of them.
Feedback
Author
About the Author
Thomas Zachmann
Thomas Zachmann has spent more than twenty years building systems, and the last several of them building Kubernetes platforms for organisations where security and auditability are the requirement rather than the aspiration: on-premises, on bare metal, in air-gapped networks, and in European sovereign clouds — under European regulatory and audit regimes.
His work is the hardening of container platforms and everything that has to hold up when an auditor asks: policy enforcement with Kyverno, identity and access with Keycloak, supply-chain evidence with Harbor, Trivy and Dependency Track — and secrets management with HashiCorp Vault, which he has been deploying and operating since 2017. He works in the public clouds as well, which is what makes the on-premises argument in these books a comparison rather than a preference.
He is a Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA) and Certified Kubernetes Application Developer (CKAD). Those twenty years began in software engineering — performance and systems programming at SAP in C and C++, database performance analysis at IBM, and Go since. That background is why the automation in his platforms is written rather than bought, and why his books ask you to type rather than to read.
He is based in Hamburg and works across the DACH region.
Get the free sample chapters
Click the buttons to get the free sample in PDF or EPUB, or read the sample online here
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.