Product news, tutorials, integrations, and deep dives.

HashiCorp Vault is now available on HashiCorp Cloud Platform in public beta.

Announcing HCP Vault Public Beta

See how HashiCorp Terraform and Packer can leverage of Microsoft Azure’s Managed Identities.

Azure Managed Identities with the HashiCorp Stack: Part 1

HashiCorp Terraform Cloud Business tier provides self-hosted agents which allow customers to decide where they want to run their Terraform operations. 

An Introduction to Terraform Cloud Agents

Learn to manage your provider versions with this new tutorial on HashiCorp Learn. 

New Terraform Tutorial: Lock and Upgrade Provider Versions

Learn testing strategies for HashiCorp Terraform modules and configuration, and learn how to run tests against infrastructure.

Testing HashiCorp Terraform

HashiCorp Consul-Terraform-Sync (CTS) is now in beta. CTS enables operations to achieve Network Infrastructure Automation leveraging Terraform’s robust provider ecosystem.

Consul-Terraform-Sync Beta Release Now Available

Read our recap of the recent updates to HCS on Azure and the latest integrations between Azure services and HashiCorp Consul, Terraform, and Vault.

HashiCorp Highlights for Microsoft Ignite

The Packer team is excited to announce the release of the Packer Plugin SDK, a standalone Go module for developing Packer plugins.

Announcing the Packer Plugin SDK

Learn the equivalent terminologies, comparisons, and differentiations between HashiCorp Nomad and Kubernetes.

A Kubernetes User's Guide to HashiCorp Nomad

The HashiCorp Terraform Strategic Integrations team is pleased to announce the General Availability of the HashiCorp Terraform Cloud Operator for Kubernetes. 

Announcing General Availability of the HashiCorp Terraform Cloud Operator for Kubernetes 

See the recovery steps to protect your data and secrets during an extended outage using Kubernetes and HashiCorp Consul. 

Disaster Recovery for HashiCorp Consul on Kubernetes

HashiCorp Boundary 0.1.5: Target-Aware Workers and More

This new tutorial collection uses a case study about a fictional company to illustrate a  monolith to microservices migration with HashiCorp Consul and Kubernetes.

New Learn Tutorials: Migrating to Microservices with Consul on Kubernetes

We have developed a baseline SELinux policy for securing Vault on Red Hat-based Linux Distributions

Hardening HashiCorp Vault with SELinux

Discover how the Kubernetes and Kubernetes-alpha providers for HashiCorp Terraform allow users to specify whether they must meet certain conditions before they successfully apply a resource, giving users more control over their Kubernetes infrastructure.

Wait Conditions in the Kubernetes Provider for HashiCorp Terraform 

Check out the latest updates and new additions to our collection of tutorials for deploying Vault on Kubernetes. 

Updates to the HashiCorp Learn's Vault-Kubernetes Collection

Seamless application integration with a fully functional RBAC system.

Gating Access to Kubernetes API & Workloads with HashiCorp Boundary

HashiCorp Cloud Platform (HCP) Consul is moving into general availability. In this blog, we’ll show users how they can get started consuming Consul as a managed offering in AWS. 

First Steps with HCP Consul on AWS

HCP Consul is now generally available on AWS. HCP Consul is a fully managed service mesh to discover and securely connect any service.

Announcing HCP Consul General Availability

Learn how to build observability as code infrastructure automation using New Relic, Terraform Cloud, and Google’s 4 Golden Signals of SRE.

Building Alerts for Observability’s 4 Golden Signals with Terraform Cloud and New Relic

Version 2.0 of the Kubernetes and Helm providers includes a more declarative authentication flow, alignment of resource behaviors and attributes with upstream APIs, normalized wait conditions across several resources, and removes support for Helm v2.

Announcing Version 2.0 of the Kubernetes and Helm Providers for HashiCorp Terraform 

Learn about the pros and cons of using mono repositories and multi repositories along with the most logical use case for each.

Terraform Mono Repo vs. Multi Repo: The Great Debate

Sentinel 0.17 provides the ability to return non-boolean data within a policy. See examples of how to use this new functionality to improve compliance reporting capabilities.

Using Rich Return Types and Map Expressions in Sentinel 0.17

Learn how to output data about your infrastructure. 

New Terraform Tutorial: Terraform Outputs

Kubernetes Initializer built by Ambassador Labs provides a new experience for simplifying the deployment of Ambassador and Consul in a Sandbox Kubernetes environment. 

Getting Started with Ambassador and Consul Using Kubernetes Initializer

CDK for Terraform now supports Java and C# and has new collaboration features on Terraform Cloud.

Announcing CDK for Terraform 0.1

Customers can now run Terraform Enterprise across two application nodes for increased reliability and scale. 

Announcing Terraform Enterprise Active/Active Architecture General Availability

The cryptography and key management protecting HashiCorp Vault secrets is designed to stand up to concerted attacks from well-resourced, skilled adversaries. Here's how it works.

When the Levee Breaks: Protecting Vault Against Advanced Adversaries and Internal Threats

Levant enhances HashiCorp Nomad with reusable, automated, and operator-friendly deployments.

Levant is Now a HashiCorp-Supported Project

A new tutorial on HashiCorp Learn shows how to protect sensitive data with Terraform.

New Terraform Tutorial: Sensitive Input Variables

A new Couchbase secrets engine is available for HashiCorp Vault.

Announcing the Couchbase Secrets Engine

In the last three months we've added 9 Terraform providers to our list of verified integrations in the Terraform Registry. Here's a look at each of them. 

Sumo Logic and Databricks Among 9 Newly Verified Terraform Providers

HashiCorp Consul Service on Azure now offers federation between HCS datacenters as a preview feature.

Introducing Federation on HashiCorp Consul Service

Two AWS quick start guides for HashiCorp Vault on EKS and EC2 are now updated for compatibility with Vault 1.6.

HashiCorp and AWS Launch Quick Start Guides for Vault 1.6 on Amazon EKS and EC2

Get 7 best practices for preventing configuration drift in enterprise scale IT operations.

Change Management At Scale: How Terraform Helps End Out-of-Band Anti-Patterns

Configuration syncing, templating, and path variables come to Waypoint to enable you to better build, deploy, and release applications across any platform.

Announcing HashiCorp Waypoint 0.2.0

Learn how to secure your Consul agents and access to data with Vault integrations. We also have new Consul 1.9 tutorials.

New Learn Tutorials: Secure Consul with Vault's Secret Engines

Nomad 1.0, released in GA today, is a major milestone for the Nomad team and HashiCorp.

Announcing General Availability of HashiCorp Nomad 1.0

HashiCorp Nomad scheduled 2,000,000 Docker containers on 6,100 hosts in 10 AWS regions in 22 minutes.

HashiCorp Nomad Meets the 2 Million Container Challenge

New step-by-step tutorials to demonstrate the use of Vault C# client library to leverage HashiCorp Vault in your .NET applications.

Use HashiCorp Vault C# Client with .NET Core

Terraform 0.14 features a new concise diff renderer, provider dependency lockfile, and more.

Announcing HashiCorp Terraform 0.14 General Availability 

Announcing General Availability of HashiCorp Consul 1.9

The Terraform AWS provider now supports Code Signing for AWS Lambda, which involves digitally signing code artifacts and verifying at deployment. 

Announcing Support for Code Signing for AWS Lambda in the Terraform AWS Provider

Get better observability and debuggability in your Nomad clusters with the new Event Stream feature in Nomad 1.0.

Building on Top of HashiCorp Nomad’s Event Stream

Learn how to apply distributed tracing by instrumenting it in your code directly or leveraging the observability hooks of Consul Service Mesh. Both examples use Datadog.

Leveling up Your Service Mesh with Observability and Distributed Tracing for Consul

The Terraform AWS provider has added support for the newly released AWS Network Firewall service.

Announcing Support for AWS Network Firewall in the Terraform AWS Provider

While Kubernetes is leading the orchestration market, this blog explains why a growing number of customers choose Nomad as an alternative or use each tool where most appropriate. 

Nomad, Kubernetes, and a Pragmatic Look at Choosing Orchestrators

New dependency lock files in Terraform 0.14 help duplicate previous runs so they use exactly the same provider versions.

Terraform 0.14 Introduces a Dependency Lock File for Providers

Consul 1.9 now provides OpenShift support for Kubernetes deployments with a secure-by-default configuration.

Introducing OpenShift Support for HashiCorp Consul on Kubernetes 

Consul 1.9 adds Custom Resource Definition support, allowing users to interact with Consul using a more Kubernetes-native experience.

Custom Resource Definitions for HashiCorp Consul on Kubernetes 

In preparation for KubeCon 2020, this blog explores how features in Consul 1.9 help enhance the experience of running Consul on Kubernetes. 

KubeCon 2020: HashiCorp Consul Further Expands Kubernetes Support

With the release of HashiCorp Nomad 1.0, Nomad Enterprise now includes Dynamic Application Sizing, an expansion of Nomad's existing Autoscaler capabilities.

HashiCorp Nomad Dynamic Application Sizing

New step-by-step tutorials demonstrate the features introduced in Vault 1.6. 

Vault Learning Resources: Vault 1.6 Release Highlights

This release features Integrated Storage enhancements, a new Key Management Secrets Engine, Transform Secrets Engine updates, and more.

Announcing HashiCorp Vault 1.6

Terraform 0.14 allows users to define values as “sensitive,” making it easier to redact sensitive information in Terraform workflows.

Terraform 0.14 Adds the Ability to Redact Sensitive Values in Console Output

Take a brief tour of Nomad 1.0’s new zero-configuration topology visualization tool.

See Your Entire Cluster at Once with Nomad's Topology Visualization

Sentinel 0.16 unifies the policy authoring workflow by including HCL support and expanding the standard imports.

Announcing HashiCorp Sentinel 0.16

Learn how the domain model works in HashiCorp Boundary and how it approaches IAM.

Understanding the Boundary Identity and Access Management Model

Two new libraries for Terraform provider development are now available, enabling more powerful interactions with Terraform.

Making Terraform Provider Development More Accessible

Terraform 0.14 now features a new concise diff renderer that makes it easier to see changes for any Terraform plan.

Terraform 0.14 Adds a New Concise Diff Format to Terraform Plans

Learn how to use the features built into Terraform Enterprise that help teams manage infrastructure as code in air gap networks.

Deploying Terraform Enterprise in Air Gapped Environments

Using Boundary's credential abstraction along with ephemeral targets makes it very hard for adversaries to gain anything.

Shadow and Dust: Better Security Through HashiCorp Boundary and Ephemeral Infrastructure

We've begun releasing new versions of Terraform's utility providers that deprecate support for Terraform 0.11.

Major Release for All HashiCorp Terraform Utility Providers

HashiCorp Nomad has officially reached version 1.0, bringing HCL2 support, dynamic application sizing, namespaces in the OSS version, and more.  

Announcing HashiCorp Nomad 1.0 Beta

We have updated our tutorials on integrating Terraform with CircleCI and GitHub Actions.

New Terraform Tutorials: Automate Terraform Workflows with CircleCI or GitHub Actions

Boundary was born out of feedback from you, our end users.

Why We Built HashiCorp Boundary

New Sentinel HTTP import capabilities in Vault Enterprise 1.5 enable new sophisticated governance policies. See it in action.

Using Sentinel's HTTP Import in HashiCorp Vault Enterprise

Terraform 0.14 is now available in beta and features improvements in security, visibility, and stability.

Announcing HashiCorp Terraform 0.14 Beta

A consistent developer workflow to build, deploy, and release applications across any platform.

Announcing HashiCorp Waypoint

Consul 1.9 introduces new service mesh visualization tools that help users troubleshoot their mesh and view key metrics.

Service Mesh Visualization in HashiCorp Consul 1.9

Try HashiCorp Vault as a managed cloud service by signing up for the HCP Vault private beta.

Announcing Vault on the HashiCorp Cloud Platform

The HashiCorp Cloud Platform and its Consul service are now available for all to try in public beta.

Announcing HCP Consul Public Beta

Simple and secure remote access — to any system anywhere based on trusted identity.

Announcing HashiCorp Boundary

Consul 1.9 adds more service mesh features including app-aware intentions, visualization enhancements, and custom resource definitions.

Announcing HashiCorp Consul 1.9

We are pleased to introduce Consul Terraform Sync: a new tool for automating network infrastructure, powered by our robust Terraform provider ecosystem.

Announcing Consul Terraform Sync Tech Preview

We're expanding the HashiCorp Cloud Engineering Certification program with a new Consul Associate certification.

Announcing the Consul Associate Cloud Engineering Certification for Network Automation

Developers no longer have to make their Lambda functions Vault-aware. 

Use AWS Lambda Extensions to Securely Retrieve Secrets From HashiCorp Vault

Learn how to create a custom Terraform provider with this new collection of Terraform tutorials on HashiCorp Learn.

New Terraform Tutorials on Using and Creating Custom Terraform Providers

This new feature allows Nomad to provide access to Consul services from outside the service mesh.

Introducing HashiCorp Nomad 0.12's New Consul Ingress Gateway Capability

With official, verified, and community providers now available in the Terraform Registry, we wanted to share 11 verified integrations that have been big additions.

Announcing 11 Verified Providers for Terraform

HashiCorp Consul Service (HCS) on Azure can be launched directly from the Azure Portal, but you can also manage HCS using Terraform Cloud. 

Managing HCS with Terraform Cloud

Use Vault-generated dynamic credentials to provision infrastructure. Learn how to inject secrets into your Terraform configuration using the Vault provider.

Learn to Inject Secrets Into HashiCorp Terraform Configuration using Vault

New starter modules are available for Nomad, Consul, and Vault in AWS.

Announcing New HashiCorp Terraform Modules for Consul, Nomad, and Vault

A recap of the major news, workshops, and panels for HashiCorp Nomad during HashiConf Digital in June.

HashiConf Digital June 2020: Nomad News in Review

Get Terraform, Packer, Vault, Consul, and Nomad up and running even faster on macOS with our new official Homebrew Tap.

Announcing HashiCorp’s Homebrew Tap

In this short tutorial, learn how to use Auth0 as the identity provider for  Single Sign On into Terraform Cloud Business Tier using the SAML 2.0 integration.

Single Sign-On to Terraform Cloud Using Auth0

Learn about a Vault SlackBot made by DigitalOnUs.

Vault AIDE: A ChatOps Bot for HashiCorp Vault

Explore a new collection of Terraform tutorials that can help you through your Kubernetes adoption journey.

New Terraform Tutorials on Provisioning and Managing Kubernetes Clusters

We are pleased to announce the availability of the HashiCorp Consul Service (HCS) on Azure Production tier. The new offering enables a user to deploy production grade Consul clusters directly from the Microsoft Azure portal.

Announcing HashiCorp Consul Service on Azure Production Tier

Learn about the advanced features of HashiCorp's Consul service mesh that are valuable to both infrastructure operators and developers.

HashiCorp Consul Ingress Gateways and L7 Traffic Management in Kubernetes

Try two new hands-on tutorials to learn best practices for using Terraform to provision infrastructure with Packer or Cloud-init.

Learn to Provision Terraform Infrastructure using Packer & Cloud-Init

When multiple teams use Consul, it becomes difficult to correlate manually managed policies with the identity accessing it. In this blog, we'll show you an automated method to ensure least-privilege access to Consul using Terraform and Vault. 

Managing HashiCorp Consul Access Control Lists (ACLs) with Terraform & Vault

We are happy to announce that we have an officially supported HashiCorp Vault GitHub Action. GitHub Actions allow you to easily automate your CI/CD developer workflows to run actions against repositories based on triggers within GitHub. The Vault GitHub Action allows you to take advantage of secrets sourced from your HashiCorp Vault infrastructure for things like static and dynamic secrets and inject these secrets into your GitHub workflows.

Automate Secret Injection into CI/CD Workflows with the GitHub Action for Vault

Take a brief tour of all that is new and noteworthy with Terraform since HashiConf Digital in June.

HashiConf Digital June 2020: Terraform News in Review

As more organizations make the shift from monolithic infrastructure to microservice-based architectures, there remain some applications which cannot be added to a service mesh, either because of technology or regulatory constraints (e.g. managed database services). However, services running inside the mesh require a secure and intelligent way to communicate with these external services. Consul and BIG-IP provide organizations an end-to-end solution to achieve this communication

F5 BIG-IP Terminating Gateway Egress with Consul 

Terraform Cloud’s Business tier was recently released and offers several enterprise-grade features, one of which was audit logging. This adds visibility across an entire Terraform organization! We also teamed up with Splunk to release an app to integrate Terraform Cloud’s audit logging with existing Splunk environments

HashiCorp Terraform Cloud Audit Logging with Splunk

Recently, a SaaS company in the operations software industry needed the ability to provision and manage multiple Kubernetes clusters both on-premises and in various public clouds. Redapt used HashiCorp Terraform and various Terraform providers to make the process efficient, repeatable, and recoverable in case of disaster.

Using Terraform to Manage Multiple Kubernetes Clusters On-Premises and in the Cloud

We are excited to announce that HashiCorp Vault is now validated on Google Cloud Platform’s Confidential Computing service. Confidential Computing allows HashiCorp Vault to operate in environments with resilient host based security that adds additional protection through the use of memory encryption.

Using HashiCorp Vault with Google Confidential Computing

Today, the Sentinel team is pleased to announce the release of the Sentinel Playground. We have built the Playground so that new and existing customers have access to a zero-install development environment. Now, practitioners can learn and experiment with policy as code in minutes without having to install and maintain runtime environments on their own machines.

Announcing the Sentinel Playground

Engineers are becoming the new cloud financial controllers as finance teams begin to lose some of their direct control over new fast-paced, on-demand infrastructure consumption models driven by cloud. So the question becomes: What are the people, processes, and technologies I can use to navigate this sea change?