Demos

Runnable reference deployments for KeyRack.

FOSS demos (open source)

Each demo is a docker compose up away in the keyrack-oss repository:

Demo	What it shows	Provider
01-foss-vault	Key lifecycle with Vault Transit	Vault
02-foss-softhsm	HSM-backed crypto via PKCS#11	SoftHSM
04-hyok-full-stack	AuthN + AuthZ + Audit + HYOK disconnect	SoftHSM + NATS + Cedar
06-provider-routing	Tag-driven routing across HSM partitions	2× SoftHSM tokens
08-cascade-rotation	Hierarchical cascade rotation + cooperative ack/complete	Software
09-audit-tamper-evidence	Ed25519-signed + BLAKE3 hash-chained audit log verification	Software
10-mtls-identity	mTLS client-certificate identity	Software
11-multi-tenant-hyok	Multi-tenant HYOK with per-tenant HSMs	2× SoftHSM tokens

Run all FOSS demos with pass/fail summary:

git clone https://github.com/KeyRack-io/keyrack.git
cd keyrack
./scripts/run-demos-ci.sh

Requires kind + kubectl (not Docker Compose):

Demo	What it shows	Platform
07-k8s-sidecar	App + KeyRack sidecar in one pod, Postgres + Cedar	kind

AWS KMS shim demos ship with commercial extensions:

Demo	What it shows	License
commercial-01-aws-kms-shim	AWS SDK → KeyRack shim	Commercial
commercial-03-hyok-aws-shim	HYOK with AWS SDK compatibility	Commercial

These live in keyrack-commercial/demos/ — contact commercial licensing for access.