Vault provides a Kubernetes authentication method that enables clients to authenticate with a Kubernetes Service Account Token. Applications using the Vault service running in Kubernetes can leverage the transit secret engine as "encryption as a service". This allows applications to offload encryption needs to Vault before storing data at rest.

manage and control access to secrets