vaultenv

Launch processes with Vault secrets in the environment (by channable)

Vaultenv Alternatives

Similar projects and alternatives to vaultenv

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better vaultenv alternative or higher similarity.

vaultenv reviews and mentions

Posts with mentions or reviews of vaultenv. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-08-16.
  • Using secrets in kube prom stack helm chart
    2 projects | /r/devops | 16 Aug 2021
    Having secrets in an external system (like Hashicorp Vault) and then using [vaultenv](https://github.com/channable/vaultenv) to inject these during `helm install/upgrade`. So you end up with something like `vaultenv ... -- helm install --set config.myvar=${VAULTENV_INJECTED_ENV_VALUE}` (or similar). Point is I use vaultenv to run helm with secrets injected as env vars only during the helm run, and use helm's `--set` flag to set individual secrets. This can get tedious if you have many secrets as you have to specify each of them individually with --set. Usually I wrap this in a Makefile or a shell script for easier invoking.
  • Nix is the ultimate DevOps toolkit
    21 projects | news.ycombinator.com | 9 Apr 2021
    > Also, regarding DevOps, the tooling around Nix makes it a little brittle for anything event based--rapidly changing configurations on the fly due to network conditions (Consul, Ansible, etc). This is where configuration management is heading, and due to the static nature of Nix, delegating dynamic changes is hard/anti pattern.

    Channable uses Consul, Vault, etc. for dynamic configuration and it works with Nix just fine.

    You don't have to use static configuration files with Nix. Either fetch dynamic stuff using the Consul, Vault, etc. APIs at runtime or use a tool like vaultenv [1] or similar if you don't want this logic in your application code.

    Put those tools in your systemd service before launching your app, and you're good to go.

    (NB: I was DevOps teamlead at Channable while a part of this work was being done. Sad that I won't be able to see the final picture.)

    [1]: https://github.com/channable/vaultenv

Stats

Basic vaultenv repo stats
2
432
4.7
15 days ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com