trousseau
medusa
trousseau | medusa | |
---|---|---|
1 | 5 | |
173 | 424 | |
1.2% | - | |
1.4 | 6.4 | |
8 months ago | 11 days ago | |
Go | Go | |
Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
trousseau
-
Are you using Vault?
I usually use trousseau, the secrets are still in k8s but they are encrypted with a key that is in Vault. It is utilising Kubernetes KMS keys, so the decryption and encryption is happening automatically as long as the correct RBAC is applied.
medusa
-
Importing and exporting kv secrets in Vault
Link to the project: https://github.com/jonasvinther/medusa
- Automatically import Secrets INTO Vault
-
wrote a small cli for recursively listing secrets from vaults kv engine, thought it may be interesting for you guys
Cool project. Maybe take a look at Medusa. I think we try to do some of the same things 🙂 https://github.com/jonasvinther/medusa
- Medusa: A cli tool for importing and exporting Vault secrets
- I made a cli tool that can do secure export and import of secrets in HashiCorp Vault
What are some alternatives?
external-secrets - External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
gomplate - A flexible commandline tool for template rendering. Supports lots of local and remote datasources.
teller - Cloud native secrets management for developers - never leave your command line for secrets.
vkv - vkv enables you to list, compare, move, import, document, backup & encrypt secrets from a HashiCorp Vault KV engine
rvault - Small tool to perform some recursive operations on Hashicorp's Vault KV
vault-generate-secrets
cobra - A Commander for modern Go CLI interactions
vault-plugin-secrets-github - Create ephemeral, finely-scoped @github access tokens using @hashicorp Vault.
vault-converter - Support converting Vault Secrets to diffrent formats.
Sup3rS3cretMes5age - Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
cryptr - Cryptr: a GUI for Hashicorp's Vault
client-go - Go client for Kubernetes.