All master encryption keys protected by software are free. All tenancies get 20 key versions of master encryption keys protected by a hardware security module (HSM) and 150 Always Free Vault secrets. You can spread these keys or secrets across any number of vaults in the tenancy, although virtual private vaults are not included in the Always Free resources.
medium.com/oracledevs/using-the-external-secrets-operator-with-oci-kubernetes-and-oci-vault-6865f2e1fe35. take alook on OCI Vault and Hashicorp integration
any idea why i would get "restexception not authorized or no ksm permissions" or really similar...its even in root compartment ive tried various key policies too not sure if even needed for root
@@learnocicloud I'm not sure tbh I think I have some kind of policy issue......I been working through making a new user and trying it but havent finished yet.....appreciate your videos bro tho they been a big help
Excellent tutorial, concise and informative!
Glad you enjoyed it!
Quick question, how many secrets and keys could be created by default free of charges ?
All master encryption keys protected by software are free. All tenancies get 20 key versions of master encryption keys protected by a hardware security module (HSM) and 150 Always Free Vault secrets. You can spread these keys or secrets across any number of vaults in the tenancy, although virtual private vaults are not included in the Always Free resources.
docs.oracle.com/en-us/iaas/Content/FreeTier/freetier_topic-Always_Free_Resources.htm
Thank you so much, perfect explanation and this is what I was exactly looking for 👍
Can we export PKCS in OCI from vault of a database ? So a third party can be linked to the vault ?
medium.com/oracledevs/using-the-external-secrets-operator-with-oci-kubernetes-and-oci-vault-6865f2e1fe35. take alook on OCI Vault and Hashicorp integration
any idea why i would get "restexception not authorized or no ksm permissions" or really similar...its even in root compartment ive tried various key policies too not sure if even needed for root
it's possible to use an old command?
@@learnocicloud I'm not sure tbh I think I have some kind of policy issue......I been working through making a new user and trying it but havent finished yet.....appreciate your videos bro tho they been a big help