Secret Management in Kubernetes: Approaches, Tools, and Best Practices

• sealed-secrets

  71 7,604 9.0 Go

  A Kubernetes controller and tool for one-way encrypted Secrets

  

  Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• secrets-store-csi-driver

  22 1,250 8.7 Go

  Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.

  

  Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• sops

  156 16,673 9.0 Go

  Simple and flexible tool for managing secrets

  

  Mozilla’s Secret Operations (SOPS) is an editor of secret files. It supports YAML, JSON, Binary, ENV, and INI formats and encrypts with an encryption key from your AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

• etcd

  74 47,574 9.9 Go

  Distributed reliable key-value store for the most critical data of a distributed system

  

  etcd is not secure - etcd is where Kubernetes secrets are stored. Though etcd is a distributed key/value store with great performance, it lacks key features when it comes to handling sensitive data such as audit log, key rotation, and encryption of key.

• helm-secrets

  12 1,499 8.1 Shell

  A helm plugin that help manage secrets with Git workflow and store them anywhere

  ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• kustomize-sops

  8 642 7.0 Go

  KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources

  

  ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• sops-secrets-operator

  4 306 7.2 Go

  Kubernetes SOPS secrets operator

  sops-secrets-operator (sops)

Suggest a related project