Helm chart

Important Note: This chart is not compatible with Helm 2. Please use Helm 3.6+ with this chart.

The Vault Helm chart is the recommended way to install and configure Vault on Kubernetes. In addition to running Vault itself, the Helm chart is the primary method for installing and configuring Vault to integrate with other services such as Consul for High Availability (HA) deployments.

This page assumes general knowledge of Helm and how to use it. Using Helm to install Vault requires that Helm is properly installed and configured with your Kubernetes cluster.

Supported kubernetes versions

The following Kubernetes minor releases are currently supported. The latest version is tested against each Kubernetes version. It may work with other versions of Kubernetes, but those are not supported.

1.30
1.29
1.28
1.27
1.26

Using the Helm chart

Helm must be installed and configured on your machine. Please refer to the Helm documentation or the Vault Installation to Minikube via Helm tutorial.

To use the Helm chart, add the Hashicorp Helm repository and check that you have access to the chart:

$ helm repo add hashicorp https://helm.releases.hashicorp.com
"hashicorp" has been added to your repositories

$ helm search repo hashicorp/vault
NAME            CHART VERSION   APP VERSION DESCRIPTION
hashicorp/vault 0.28.1          1.17.2      Official HashiCorp Vault Chart

Important: The Helm chart is new and under significant development. Please always run Helm with --dry-run before any install or upgrade to verify changes.

Example chart usage:

Installing the latest release of the Vault Helm chart with pods prefixed with the name vault.

$ helm install vault hashicorp/vault

Installing a specific version of the chart.

# List the available releases
$ helm search repo hashicorp/vault -l
NAME            CHART VERSION   APP VERSION DESCRIPTION
hashicorp/vault 0.28.1          1.17.2      Official HashiCorp Vault Chart
hashicorp/vault 0.28.0          1.16.1      Official HashiCorp Vault Chart
hashicorp/vault 0.27.0          1.15.2      Official HashiCorp Vault Chart
hashicorp/vault 0.26.1          1.15.1      Official HashiCorp Vault Chart
hashicorp/vault 0.26.0          1.15.1      Official HashiCorp Vault Chart
hashicorp/vault 0.25.0          1.14.0      Official HashiCorp Vault Chart
hashicorp/vault 0.24.0          1.13.1      Official HashiCorp Vault Chart
hashicorp/vault 0.23.0          1.12.1      Official HashiCorp Vault Chart
...

# Install version 0.28.1
$ helm install vault hashicorp/vault --version 0.28.1

Security Warning: By default, the chart runs in standalone mode. This mode uses a single Vault server with a file storage backend. This is a less secure and less resilient installation that is NOT appropriate for a production setup. It is highly recommended to use a properly secured Kubernetes cluster, learn the available configuration options, and read the production deployment checklist.

If you use AWS features (e.g, AWS PrivateLink) that require a network load balancer (NLB), you must provision your NLB before your application load balancer (ALB).

Tutorial

Refer to the Kubernetes tutorials series to learn how to run Vault on Kubernetes.