3 ms·
> This way I am not bound to [...] keywhiz No, but you’re bound to Vault? I agree that Vault is likely the best solution to this (dynamic secrets are super us
by jen20 6y ago
> This way I am not bound to [...] keywhiz
No, but you’re bound to Vault?
I agree that Vault is likely the best solution to this (dynamic secrets are super useful), but “not being coupled to something” is not a benefit you get from it.
- gchamonlive 6y agoYou are right, I think that was a little harsh on my part. I can't really say much about keywhiz, I should have left it out of my comment. Yes, you are tied to Hashicorp Vault once you adopt it, but it isn't much of a problem because you can easily redeploy it in a different cloud. It might be true to keywhiz, so my comment wouldn't be valid to this point.