Secret Management in Kubernetes: Approaches, Tools, and Best Practices

• sealed-secrets

  28 6,004 8.5 Go

  A Kubernetes controller and tool for one-way encrypted Secrets

  

  Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• secrets-store-csi-driver

  13 946 6.3 Go

  Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.

  

  Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• InfluxDB

  www.influxdata.com

  sponsored

  Access the most powerful time series database as a service. Ingest, store, & analyze all types of time series data in a fully-managed, purpose-built database. Keep data forever with low-cost storage and superior data compression.

  

• sops

  66 12,441 0.0 Go

  Simple and flexible tool for managing secrets

  

  Mozilla’s Secret Operations (SOPS) is an editor of secret files. It supports YAML, JSON, Binary, ENV, and INI formats and encrypts with an encryption key from your AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

• etcd

  28 42,935 9.9 Go

  Distributed reliable key-value store for the most critical data of a distributed system

  

  etcd is not secure - etcd is where Kubernetes secrets are stored. Though etcd is a distributed key/value store with great performance, it lacks key features when it comes to handling sensitive data such as audit log, key rotation, and encryption of key.

• helm-secrets

  6 920 8.3 Shell

  A helm plugin that help manage secrets with Git workflow and store them anywhere

  ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• kustomize-sops

  6 457 2.1 Shell

  KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources

  

  ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• sops-secrets-operator

  2 215 4.7 Go

  Kubernetes SOPS secrets operator

  sops-secrets-operator (sops)

• SonarLint

  www.sonarlint.org

  sponsored

  Clean code begins in your IDE with SonarLint. Up your coding game and discover issues early. SonarLint is a free plugin that helps you find & fix bugs and security issues from the moment you start writing code. Install from your favorite IDE marketplace today.

  

Suggest a related project