The parts of HashiCorp Vault that beat a key-value store — dynamic database credentials generated on demand, a PKI engine for short-lived certificates, an SSH CA, and transit encryption — and how to put them into production.
Ssh-Ca
-
Vault Beyond Secrets: PKI, SSH CA, and Dynamic DB Credentials