Case Study: PostFinance scales secrets management and Kubernetes integration with HashiCorp Terraform and Vault

PostFinance on Using Terraform and Vault at Scale

PostFinance, a major Swiss retail bank, needed a secure and scalable way to manage infrastructure and secrets as it expanded its cloud-native and core banking initiatives. Since 2017, the bank has been working with HashiCorp products, especially HashiCorp Vault and Terraform, to support use cases across banking systems, cash withdrawal, and integrations with Kubernetes and other tools.

With HashiCorp Vault and HashiCorp Terraform, PostFinance centralized secret management and enabled machine and app authentication for Puppet, AppRole, and Kubernetes at scale. The result was high-volume adoption, including more than 800,000 Vault requests per day, 4,000,000 decrypts from Puppet per day, 3,000 AppRole logins per day, and 40 Kubernetes logins per day, while also improving the security of deployments and ATM backend modernization on Kubernetes.

PostFinance

Christian Bürgi

Software Enginer