bank-vaults
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines). (by banzaicloud)
kubernetes-external-secrets
Integrate external secret management systems with Kubernetes (by external-secrets)
Our great sponsors
| bank-vaults | kubernetes-external-secrets | |
|---|---|---|
| 10 | 26 | |
| 0 | 2,584 | |
| - | - | |
| 0.0 | 7.7 | |
| 7 months ago | almost 2 years ago | |
| Go | JavaScript | |
| Apache License 2.0 | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bank-vaults
Posts with mentions or reviews of bank-vaults.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-04-26.
-
Self-hosted Secrets Manager (or something alike)
there's https://github.com/banzaicloud/bank-vaults wich is a wrapper for hashivault, so not exactly what you're looking for but worth looking into.
-
Secrets Management on Kubernetes: How do you handle it?
https://github.com/banzaicloud/bank-vaults. Mind you after Cisco bought Banzai work on this project seems to have stopped. It works very well for us though.
-
Run a pod in a namespace without having access to it's secrets?
Use vault-env (we use https://github.com/banzaicloud/bank-vaults) to inject the secret as an ENV var to the pod at runtime, based on Vault's Kubernetes auth
-
Secrets storage best practices
We use bank vault to inject secrets as environment variables. This does not require changes to the app. A sidecar is automatically added to the pod to retrieve the secrets and inject them in the app runtime. Here’s the link https://github.com/banzaicloud/bank-vaults
- How to manage passwords in Helm
- Homelab: Cluster Architecture
-
Secrets Managers for Kubernetes (Vault (Hashi), Conjur (CyberArk), Platform Specific, etc)
Encrypted secrets can't be more than a temporary solution. That's why I'm not a fan of SOPS/Sealed Secrets/etc. I think the future for both security and usability is dynamic injection. Vault is the dopeness but I'm not a fan of the upstream Vault Injector -- shared volumes are a step backwards. It's all about the BanzaiCloud Vault Webhook -- secrets **only ever available to the running process**, rotation means: update the value in vault and bounce the pod, done. This is the way.
kubernetes-external-secrets
Posts with mentions or reviews of kubernetes-external-secrets.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-08-13.
- aws secrets with eks ,Teffarorm & helm
-
Securing Kubernetes Secrets with HashiCorp Vault
$ helm repo add external-secrets https://external-secrets.github.io/kubernetes-external-secrets/ "external-secrets" has been added to your repositories $ helm install k8s-external-secrets external-secrets/kubernetes-external-secrets -f values.yaml NAME: k8s-external-secrets LAST DEPLOYED: Wed Mar 23 22:50:35 2022 NAMESPACE: default STATUS: deployed REVISION: 1 TEST SUITE: None NOTES: The kubernetes external secrets has been installed. Check its status by running: $ kubectl --namespace default get pods -l "app.kubernetes.io/name=kubernetes-external-secrets,app.kubernetes.io/instance=k8s-external-secrets" Visit https://github.com/external-secrets/kubernetes-external-secrets for instructions on how to use kubernetes external secrets
-
SimpleSecrets: A self-hosted K8S Secrets Manager Operator
I’m reading above that you weren’t aware of sealed-secrets. So I guess that you are not familiar with ExternalSecrets secrets neither. Very solid project
- Managing json config files for apps deployed to k8s at scale
-
1Password Has Raised $620M
They probably should merge with https://github.com/external-secrets/kubernetes-external-secr...
-
Do you have a TODO checklist when creating clusters from scratch?
I do not recommend vault if you are not experienced. It is a heavy infra to manage. I suggest looking into https://github.com/external-secrets/kubernetes-external-secrets and selecting the tool offered by your cloud providers.
-
Kuberentes CI/CD
We don't keep anything sensitive inside of Helm charts. We use AWS Secrets Manager and external-secrets
-
Inject Secrets to Deployment/Pod as Environment variable from AWS Secret Manager
We did a solution based on external secrets(https://github.com/external-secrets/kubernetes-external-secrets) and stakater reloader (https://github.com/stakater/Reloader)
-
Hashicorp Vault integration with Secret objects
Just FYI also, depending on which K8s Version you’re on you might run into this: https://github.com/external-secrets/kubernetes-external-secrets/issues/721
- external-secrets - difference between external-secrets and kubernetes-external-secrets
What are some alternatives?
When comparing bank-vaults and kubernetes-external-secrets you can also consider the following projects:
argocd-vault-plugin - An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets
sealed-secrets - A Kubernetes controller and tool for one-way encrypted Secrets
vault-secrets-operator - Create Kubernetes secrets from Vault for a secure GitOps based workflow.
Bitwarden - The core infrastructure backend (API, database, Docker, etc).
secrets-store-csi-driver - Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
Reloader - A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
sops-secrets-operator - Kubernetes SOPS secrets operator
helm-charts
Flux - Successor: https://github.com/fluxcd/flux2
sops - Simple and flexible tool for managing secrets
postgres-operator - Postgres operator creates and manages PostgreSQL clusters running in Kubernetes
onepassword-operator - The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.
kubernetes-external-secrets vs argocd-vault-plugin
kubernetes-external-secrets vs sealed-secrets
kubernetes-external-secrets vs vault-secrets-operator
kubernetes-external-secrets vs Bitwarden
kubernetes-external-secrets vs secrets-store-csi-driver
kubernetes-external-secrets vs Reloader
kubernetes-external-secrets vs sops-secrets-operator
kubernetes-external-secrets vs helm-charts
kubernetes-external-secrets vs Flux
kubernetes-external-secrets vs sops
bank-vaults vs postgres-operator
kubernetes-external-secrets vs onepassword-operator