Learning with K3s at home. Is it "better" to store secrets encrypted in the git repo (e.g., sealed-secrets) or in a separately managed secret database (e.g., vault)?

1. sealed-secrets

   1 72 8,214 8.9 Go

   A Kubernetes controller and tool for one-way encrypted Secrets

   

   store secrets encrypted in the public git repo (e.g., sealed-secrets)

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. Vault

   2 178 32,390 9.9 Go

   A tool for secrets management, encryption as a service, and privileged access management

   

   store secrets encrypted in a separately managed secret database (e.g., vault)

4. argocd-vault-plugin

   3 9 886 6.0 Go

   An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets

   

   argoproj-labs/argocd-vault-plugin

5. sops

   4 159 18,465 9.5 Go

   Simple and flexible tool for managing secrets

   

   sops

6. git-crypt

   5 54 8,841 2.6 C++

   Transparent file encryption in git

   

   git-crypt

7. gitops-environment-promotion

   6 2 297 0.0

   Example for promoting a release between different GitOps environments

   

   Yes. I personally use Kustomize overlays. Here is an contrived example with 10+ envs https://github.com/kostis-codefresh/gitops-environment-promotion/tree/main/envs

8. vault-secrets-operator

   7 5 658 7.9 Go

   Create Kubernetes secrets from Vault for a secure GitOps based workflow.

   

   For home use, I wouldn't bother with Vault unless that's really what you want to learn. Then it's worth looking into setting something up where you could use vault secrets, using one of the available options (I haven't seen the vault-secrets-operator being mentioned).

9. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

10. rpi

    8 1 1 10.0 Makefile

    k3s@home setup (by slowr)

    

    I use sops with age for my local k3s at home. Take a look here: https://github.com/slowr/rpi

Suggest a related project