3 ms·
Is this related to Pinterest's knox open source project? Also, how do you think about this in the landscape as there are lots of secret management solutions (in
by gkapur 6y ago
Is this related to Pinterest's knox open source project? Also, how do you think about this in the landscape as there are lots of secret management solutions (including Hashicorp Vault, etc.)
- fabien-h 6y agoYou are right, there are many secrets management services and they are good. But I address a specific need: be up and running in minutes. For solutions like the self-hosted version of Hashi Corp Vault (and Pinterest Knox apparently), you need to install it on a server, run it yourself, maintain the thing... This is work, I'm doing it for you. This is time, I'm spending it for you. This is money, you are saving a lot here. Managed solutions work too, but they are all an order of magnitude too complex, too expensive or both. There are more than 200 topics complex enough in Hashi Corp Vault to deserve a complete tutorial on their website https://learn.hashicorp.com/vault https://learn.hashicorp.com/vault. And this is not even the full documentation. If we want to make proper secrets management mainstream in small projects, it needs to be much more simple. With Knox, you have one view per project and you need a couple of minutes to learn everything there is to know. It does less, but you probably don't need more.
- fabien-h 6y agoOh, I did not see the Pinterest project before. Not related. Thank you for pointing this :)