tag-env-sustainability
sealed-secrets

tag-env-sustainability | sealed-secrets | |
---|---|---|
7 | 72 | |
251 | 7,912 | |
0.4% | 1.5% | |
9.0 | 8.9 | |
about 1 month ago | 9 days ago | |
HTML | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
tag-env-sustainability
-
How AI Energy Issues Can Affect Your Life
Some cloud services and larger technology organizations are working to decrease the demand load on utilities by powering systems entirely by renewable energy. Also, a data center may arrange to provide most of its server-generated heat to community projects or other buildings that would have needed electricity for heating. This allows zero carbon heat emission.
-
Building a Sustainable Web: a practical exploration of Open Source tools and strategies
The very first community I became part of was the Environmental Sustainability Technical Advisory Group which is part of the CNCF. The TAG Env Sustainability's goal is similar to the GSF's: their mission is to "advocate for, develop, support and help evaluate environmental sustainability initiatives in cloud native technologies."
-
Ask HN: Good online communities to learn about Green / Sustainable Computing?
To learn more about and interact with like minded folks on the topic of Green and/or Sustainable computing, where does one go to online?
Some examples I found:
- Green Software Foundations' various project github repo discussion groups - https://wiki.greensoftware.foundation/governance/projects
- Cloud Native Computing Foundation Environmental Sustainability Workgroup's github discussion group - https://github.com/cncf/tag-env-sustainability
- Sustainable Living at Stackexchange - https://sustainability.stackexchange.com (the green computing related posts are more limited in numbers it seems)
More suggestions and opinions is most appreciated!
-
Introduction to the Kubernetes ecosystem
It is also interesting to meet the community : the TAGs (Tech Advisor Group) which provide strategic guidance and advice on technical issues, as well as the SIGs (Special Interest Group) which focuses on areas of interest or specific expertise within the Kubernetes community to drive development and innovation. The TAGs are specialized by areas, for example on security or environmental sustainability.
- Reducing your environmental impact with the Linkerd service mesh
- GitHub - cncf/tag-env-sustainability: 🌳🌍♻️ TAG Environmental Sustainability
- cncf/wg-env-sustainability: 🌳🌍♻️ Environmental Sustainability Working Group
sealed-secrets
-
Hands-on Guide to Sealed Secrets: Deploying .NET 6 Apps Securely in KIND
Sealed Secrets
-
Introduction to the Kubernetes ecosystem
External-Secrets Operator : A Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret (Alternatives : Vault, SOPS, Sealed Secrets)
-
Show HN: Open-source alternative to HashiCorp/IBM Vault
I like sealed secrets (https://github.com/bitnami-labs/sealed-secrets) a lot. It's like 1Password, but for apps in kubernetes. You only need to secure a private key, and can throw encrypted secrets in a public github repo or anywhere you want.
It's owned by VMware (Broadcom) now, so you have to decide which company you hate more.
-
Deploy Secure Spring Boot Microservices on Amazon EKS Using Terraform and Kubernetes
If you have noticed, you are setting secrets in plain text on the application-configmap.yml file, which is not ideal and is not a best practice for security. The best way to do this securely would be to use AWS Secrets Manager, an external service like HashiCorp Vault, or Sealed Secrets. To learn more about these methods see the blog post Shhhh... Kubernetes Secrets Are Not Really Secret!.
- Plain text Kubernetes secrets are fine
- Storing secrets in distributed binaries?
-
Weekly: Questions and advice
This might be OT, and forgive me, but I think one of the best practices for Encrypting and Managing secrets in Kubernetes is to use Sealed Secrets, they allow your secrets to be securely stored in git with the rest of the configuration and yet no one with access to the Git repository will be able to read them. I say this might be OT, because Sealed Secrets are trying to mitigate a different threat, the threat of the secrets at rest somewhere, and not "live in the cluster", where in theory all the ingredients to decrypt the secrets would still live.
-
Want advice on planned evolution: k3os/Longhorn --> Talos/Ceph, plus Consul and Vault
The addition of Consul and Vault gives me a few things. For one, right now I'm handling secrets with a mixture of SOPS and Sealed Secrets. I use Vault in my professional life, and have used both Vault and Consul at my last job. Vault is a beast, so I may as well get better at it; plus its options for secret injection are better.
- Homebrew 4.0.0 release
-
How to Deploy and Scale Strapi on a Kubernetes Cluster 1/2
Use Sealed Secrets Operator.
What are some alternatives?
kaito - Kubernetes AI Toolchain Operator
sops - Simple and flexible tool for managing secrets
kube-green - A K8s operator to reduce CO2 footprint of your clusters
Vault - A tool for secrets management, encryption as a service, and privileged access management
open-sustainable-technology - A directory and analysis of the open source ecosystem in the areas of climate change, sustainable energy, biodiversity and natural resources. https://docs.getgrist.com/gSscJkc5Rb1R/OpenSustaintech
vault-secrets-operator - Create Kubernetes secrets from Vault for a secure GitOps based workflow.
llama - Inference code for Llama models [Moved to: https://github.com/meta-llama/llama]
kubernetes-external-secrets - Integrate external secret management systems with Kubernetes
grype - A vulnerability scanner for container images and filesystems
argocd-vault-plugin - An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets
sig-security - 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
external-secrets - External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
