Welcome to the home page of the Deckhouse Stronghold documentation.
Deckhouse Stronghold provides secure storage and lifecycle management for sensitive data (secrets). The secret storage uses a key-value format and is compatible with the HashiCorp Vault API.
To quickly find the information you need:
- Use search if you are looking for a specific Stronghold feature, parameter, or other object.
- Use the side menu to navigate through documentation sections.
Where to start
Ready-made solutions for typical tasks are collected in Usage examples: sign-in via ALD Pro and Active Directory, secrets in Kubernetes, CI/CD, and GitOps, dynamic credentials, PKI, encryption, migration from Vault.
- Developers — first secret, client libraries, secrets in Kubernetes pods.
- DevOps engineers — CI/CD, GitOps, Terraform and Ansible, all examples.
- Administrators — installation, architecture, operations, backups.
- Security specialists — threat model, security compliance, audit, cryptographic algorithms.
- Teams migrating from HashiCorp Vault — compatibility and migration guide.
If you need help:
- Ask a question in the “Deckhouse | EN-community” Telegram channel.
- If you use Stronghold EE, contact support at
support@deckhouse.io.