Capstone
Cloud & DevOps
Cloud-Native CI/CD Platform
GitOps pipeline with Kubernetes, Helm and progressive delivery
- Kubernetes
- Docker
- Helm
- Argo CD
- +2
₹5,299₹8,999
4.8/74 reviews
Cloud & DevOps · Major Project
Secrets Management with HashiCorp Vault
Short-lived database credentials issued, leased and revoked by Vault
3-4 weeks build
Overview
Replaces the password in the config file with one that expires. A FastAPI service asks Vault for PostgreSQL credentials at start-up, Vault creates a database user just for that lease and drops it when the lease runs out, and the app renews or re-fetches before that happens. Static secrets are versioned, every access lands in the audit log, and the whole setup runs locally in Docker.
What makes it stand up
- 01Dynamic PostgreSQL users created per lease and revoked on expiry
- 02App authenticates with AppRole, so no root token ever ships with it
- 03Lease renewal and re-fetch handled without restarting the service
- 04Versioned key-value secrets with rollback to an earlier version
- 05Audit log showing who read which secret and when
Module breakdown
- 01
Vault setup
Server config, unseal keys, policies and the audit device.
- 02
Dynamic secrets
Database secrets engine with roles, TTLs and revocation.
- 03
App integration
FastAPI client that authenticates, fetches and renews leases.
- 04
Rotation
Root credential rotation and a forced revoke of a leaked lease.
- 05
Auditing
Parsing audit logs to answer who accessed what.
After this, you will be able to
- Explain why short-lived credentials limit the damage of a leak
- Defend your policy boundaries and lease lifetimes
- Demo a credential expiring and the app carrying on regardless
Technology stack
- HashiCorp Vault
- PostgreSQL
- Python
- FastAPI
- Docker
- Level
- Major Project
- Domain
- Cloud & DevOps
- Build time
- 3-4 weeks
- Difficulty
You receive
- Complete, commented source code
- 60-90 page project report (IEEE format)
- Editable presentation deck
- Architecture, ER and UML diagrams
- Local setup and deployment guide
- Sample dataset or seed data
- Viva question bank with answers
- One 45-minute walkthrough call
- 30 days of doubt-clearing support