Secret Management in Kubernetes: Approaches, Tools, and Best Practices

• sealed-secrets

  71 7,120 9.2 Go

  A Kubernetes controller and tool for one-way encrypted Secrets

  

Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• secrets-store-csi-driver

  22 1,174 8.5 Go

  Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.

  

Considering the major limitations of using Kubernetes Secrets, there are many new approaches being developed by the Kubernetes community. Kubernetes SIGs like the Secrets Store CSI Driver and solutions like the external secrets operator that works with third-party secret managers, and options to seal secrets through tools like bitnami’s sealed-secrets. To skip the tools and move directly to best practices, click here.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• sops

  150 15,069 9.2 Go

  Simple and flexible tool for managing secrets

  

Mozilla’s Secret Operations (SOPS) is an editor of secret files. It supports YAML, JSON, Binary, ENV, and INI formats and encrypts with an encryption key from your AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

• etcd

  61 46,345 9.9 Go

  Distributed reliable key-value store for the most critical data of a distributed system

  

etcd is not secure - etcd is where Kubernetes secrets are stored. Though etcd is a distributed key/value store with great performance, it lacks key features when it comes to handling sensitive data such as audit log, key rotation, and encryption of key.

• helm-secrets

  12 1,288 8.4 Shell

  A helm plugin that help manage secrets with Git workflow and store them anywhere

ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• kustomize-sops

  8 598 7.1 Go

  KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources

  

ArgoCD users would have to build container images with SOPS baked in using Helm chart extensions or Kustomize extensions. Flux allows configuring sops directly into the Flux manifests.

• sops-secrets-operator

  4 286 7.7 Go

  Kubernetes SOPS secrets operator

sops-secrets-operator (sops)

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project