cryptr
nomad
Our great sponsors
| cryptr | nomad | |
|---|---|---|
| 3 | 1 | |
| 485 | 6 | |
| 0.0% | - | |
| 0.0 | 0.0 | |
| about 1 year ago | 3 months ago | |
| HTML | Go | |
| Apache License 2.0 | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
cryptr
-
HashiCorp Vault Forked into OpenBao
My colleague at Adobe built one for our own use, since HashiCorp didn't provide one at the time: https://github.com/adobe/cryptr
IIRC HashiCorp was not interested in supporting these kinds of tools because they were in direct competition with the Vault enterprise offering.
-
Are there "Configuration Manager" solution out there?
Something like cryptr working on top of Hashicorp vault? https://github.com/adobe/cryptr
-
Recommended Vault Services?
Adobe built a web UI for Vault, if you want to use it more like a password manager: https://github.com/adobe/cryptr
nomad
-
HashiCorp Vault Forked into OpenBao
I can't discern how many are just those "dependabot" bumps but the 1400 forks show some are active https://github.com/hashicorp/nomad/forks?include=active&page... including CircleCI who I would think have a stake in a libre Nomad https://github.com/circleci/nomad/tree/circleci/release-1.5....
Now maybe their goals don't align with the community, and/or they don't want to be in the maintainer business for such a project, but better than nothing
What are some alternatives?
harp - Secret management by contract toolchain
openbao - OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
k8s-vault-webhook - A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers
medusa - A cli tool for importing and exporting Hashicorp Vault secrets
wrongsecrets - Vulnerable app with examples showing how to not use secrets [Moved to: https://github.com/OWASP/wrongsecrets]