{
  "id": 80417,
  "title": "HashiCorp Ships Public Beta of Vault Kubernetes Key Management",
  "url": "https://urgent.news/2026/08/03/hashicorp-ships-public-beta-of-vault-kubernetes-key-management",
  "topic": "finance",
  "section": "Finance & Markets",
  "published": "2026-08-03T10:00:00.000Z",
  "source": {
    "name": "InfoQ",
    "slug": "infoq",
    "url": "https://www.infoq.com/news/2026/08/vault-kubernetes-key-management/"
  },
  "original_language": "en",
  "account": null,
  "summary": "HashiCorp has released the public beta of Vault Kubernetes key management, a KMS v2-compatible plugin called vault-kube-kms. This new addition allows Kubernetes clusters to use Vault Enterprise as their KMS provider for encryption at rest, offloading envelope encryption to Vault and protecting Kubernetes Secrets and other API resources stored in etcd. By keeping the standard envelope encryption split, Kubernetes still generates and uses data encryption keys (DEKs) to encrypt sensitive resource data before it is written to etcd, preserving the throughput the API server expects. The DEK seed is protected by key encryption keys (KEKs) held in Vault, where the transit secrets engine performs the cryptographic operations. This split of duties benefits regulated teams by enabling Kubernetes to handle high-volume encrypt and decrypt calls, while Vault owns key lifecycle, rotation, policy enforcement, and audit.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}