harp
Secret management by contract toolchain (by elastic)
argocd-vault-plugin
An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets (by argoproj-labs)
Our great sponsors
| harp | argocd-vault-plugin | |
|---|---|---|
| 7 | 9 | |
| 143 | 760 | |
| 0.0% | 2.6% | |
| 3.9 | 7.3 | |
| 9 months ago | 5 days ago | |
| Go | Go | |
| Apache License 2.0 | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
harp
Posts with mentions or reviews of harp.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-01-28.
-
Harp v0.2.5 - Secret management by contract - PEM/JWT/TLSA template functions and GitHub Actions secret exporter.
Page is 404ing for me. Here’s the link the repo: https://github.com/elastic/harp/
- Harp v0.2.5 – Secret management by contract
- Elastic Harp v0.2.1 - Secret management pipeline toolchain
- Secret provisioning automation tool and golang SDK
- Harp
- Secret management automation toolchain
argocd-vault-plugin
Posts with mentions or reviews of argocd-vault-plugin.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-01-18.
-
GitOps and Kubernetes – Secure Handling of Secrets
ArgoCD supports SOPS with the vault Plugin.
-
Injecting secrets from Vault into Helm charts with ArgoCD
repoServer: rbac: - verbs: - get - list - watch apiGroups: - '' resources: - secrets - configmaps initContainers: - name: download-tools image: registry.access.redhat.com/ubi8 env: - name: AVP_VERSION value: 1.11.0 command: [sh, -c] args: - >- curl -L https://github.com/argoproj-labs/argocd-vault-plugin/releases/download/v$(AVP_VERSION)/argocd-vault-plugin_$(AVP_VERSION)_linux_amd64 -o argocd-vault-plugin && chmod +x argocd-vault-plugin && mv argocd-vault-plugin /custom-tools/ volumeMounts: - mountPath: /custom-tools name: custom-tools extraContainers: - name: avp-helm command: [/var/run/argocd/argocd-cmp-server] image: quay.io/argoproj/argocd:v2.4.8 securityContext: runAsNonRoot: true runAsUser: 999 volumeMounts: - mountPath: /var/run/argocd name: var-files - mountPath: /home/argocd/cmp-server/plugins name: plugins - mountPath: /tmp name: tmp-dir - mountPath: /home/argocd/cmp-server/config name: cmp-plugin - name: custom-tools subPath: argocd-vault-plugin mountPath: /usr/local/bin/argocd-vault-plugin volumes: - configMap: name: cmp-plugin name: cmp-plugin - name: custom-tools emptyDir: {} - name: tmp-dir emptyDir: {} # If you face issue with ArgoCD CRDs installation, then uncomment below section to disable it #crds: # install: false
- K8s and HIPPA/PHI compliant systems - Need advice!
-
Learning with K3s at home. Is it "better" to store secrets encrypted in the git repo (e.g., sealed-secrets) or in a separately managed secret database (e.g., vault)?
argoproj-labs/argocd-vault-plugin
-
Best solution to use Argocd with helm and manage secrets ? Don't say flux !
We’re using https://github.com/argoproj-labs/argocd-vault-plugin which allows you to define secrets in git (works with more backends than just hashicorp vault despite the name). The documentation took me a bit to figure out, but so far it works.
-
Best Practices for Argo CD
Argo CD Vault plugin
- Removing replication count, resource, tolerations, pvc when app is onboarded using ArgoCD
- Gotta love gitops
-
Best/Secure way to add a secret for ArgoCD Helm Chart?
I used argocd vault plugin https://github.com/IBM/argocd-vault-plugin
What are some alternatives?
When comparing harp and argocd-vault-plugin you can also consider the following projects:
stratus-red-team - :cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
kubernetes-external-secrets - Integrate external secret management systems with Kubernetes
bank-vaults - A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
kustomize-sops - KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
kubebrain - A High Performance Metadata System for Kubernetes
vault-secrets-operator - Create Kubernetes secrets from Vault for a secure GitOps based workflow.
cryptr - Cryptr: a GUI for Hashicorp's Vault
sealed-secrets - A Kubernetes controller and tool for one-way encrypted Secrets
tpack - Pack a Go workflow/function as a Unix-style pipeline command
secrets-store-csi-driver - Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
lockgit - A CLI tool for storing encrypted data in a git repo
vault-creds - Sidecar container for requesting dynamic Vault database secrets
harp vs stratus-red-team
argocd-vault-plugin vs kubernetes-external-secrets
harp vs bank-vaults
argocd-vault-plugin vs kustomize-sops
harp vs kubebrain
argocd-vault-plugin vs vault-secrets-operator
harp vs cryptr
argocd-vault-plugin vs sealed-secrets
harp vs tpack
argocd-vault-plugin vs secrets-store-csi-driver
harp vs lockgit
argocd-vault-plugin vs vault-creds