SaaSHub helps you find the best software and product alternatives Learn more →
Sops Alternatives
Similar projects and alternatives to sops
-
sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
-
age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
-
InfluxDB
Collect and Analyze Billions of Data Points in Real Time. Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.
-
-
Vault
A tool for secrets management, encryption as a service, and privileged access management
-
git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
-
terraform-provider-sops
A Terraform provider for reading Mozilla sops files
-
helm-secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
-
Onboard AI
Learn any GitHub repo in 59 seconds. Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev.
-
-
vault-secrets-operator
Create Kubernetes secrets from Vault for a secure GitOps based workflow.
-
-
secrets-store-csi-driver
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
-
-
-
terragrunt
Terragrunt is a thin wrapper for Terraform that provides extra tools for working with multiple Terraform modules.
-
pass-import
A pass extension for importing data from most existing password managers
-
passage
A fork of password-store (https://www.passwordstore.org) that uses age (https://age-encryption.org) as backend.
-
-
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
sops reviews and mentions
-
An opinionated template for deploying a single k3s cluster with Ansible backed by Flux, SOPS, GitHub Actions, Renovate, Cilium, Cloudflare and more!
Encrypted secrets thanks to SOPS and Age
-
Tracking SQLite Database Changes in Git
We do the exact same thing to keep track of some credentials we use sops[1] and AWS KMS to separate credentials by sensitivity, then use the git differ to view the diffs between the encrypted secrets
Definitely not best practice security-wise, but it works well
-
The Twelve-Factor App
For anyone new to SOPS like I was - https://github.com/getsops/sops
-
Show HN: Shello – Wrangle Environment Variables
I've found this is largely solved by strictly separating plain config and secrets, and then having secrets pull from GCP secret manager / vault / whatever.
You can then commit all the config (including the secret identifiers) and it all just works so long as you're authenticated with your secret storage system.
We do this for the live configuration as well in line with Gitops and find it to work well.
If you don't want to use a cloud secret manager you can also use something like https://github.com/getsops/sops to commit the encrypted secrets safely
-
Check your secrets into Git [video]
Basically, the simpler the better --just encrypt your secrets and check them in to version control.
We use SOPS[0] for this, and have found it to be pretty nice.
-
Is it safe to commit a Terraform file to GitHub?
To add to this, if you want to store sensitive information in git, I recommend using Mozilla SOPS in conjunction with some key story (e.g., AWS KMS). You can decode SOPS files directly from terraform if I'm not mistaken.
Unfortunately, the SOPS project is in some sort of a limbo state and there has been quite a long period with limited maintenance and unclear position from Mozilla. Despite the project being accepted into the CNCF, it's still unclear what will happen with it going forward.
-
using keyring - no keyring set and giving errors about backend
It looks like the software you're intending to use is oriented towards interacting with desktop Linux's keyring. While you can probably get this to work, I would recommend using something like sops as it's a more standardized way of storing secrets in configuration.
-
GitHub Private Repos Considered Private-Ish
Some folks use tools like https://github.com/mozilla/sops to store most secrets (besides the sops key, of course) in source control. Of course, you aren't committing the cleartext but if the repo gets published you should probably rotate your keys just to be safe...
-
A note from our sponsor - #<SponsorshipServiceOld:0x00007f0fa1724b08>
www.saashub.com | 10 Dec 2023
Stats
getsops/sops is an open source project licensed under Mozilla Public License 2.0 which is an OSI approved license.
The primary programming language of sops is Go.