3 ms·

Comparison of this with other secretes management frameworks here https://medium.com/on-docker/secrets-and-lie-abilities-the-state-of-modern-secret-management-2

• tonyhb 10y ago
  wrote this as a comment when that article was posted to YC: tl;dr: author looks at secret management services and reviews them KeyWhiz: Provides everything you need but with complex PKI management, meaning setup and maintenance is a pain. Secure. Vault: A+ would test again. Awesome rotation policies, on-demand secret generation via backends, master key sharing. Legit and secure, everything you need but has to be configured on top of your cluster. Docker: Super easy to use, and it's built in. 10/10 would use again. Keys encrypted at rest, keys encrypted over the wire, and shared with only nodes who need them. Secure all round Kube: Totally insecure. Plaintext at rest, plaintext over the network, shared everywhere. Basically a plaintext POC
  • Leon 10y ago
    Vault is really wonderful to work with, and its integration with consul makes it phenomenally powerful.
    • jsfitzsimmons 10y ago
      What kind of stuff do you get from the integration? I mean, aside from the obvious stuff like a clustered storage backend and leader election?