Vault Caching with Auto-Auth and Puppet

So I’ve done a lot of work with Vault and Puppet and how they integrate with each other.

I was recenlty posed the question:

How would these Puppet runs calling out for secrets affect the performance of Vault, and if it was possible to cache the results?

So I did a little digging and the answer is Yes, it’s possible!

Vault Caching

In the 1.1.0 release of Vault, we added the ability to run vault agent as a caching proxy.