From my little exposure to vault so far, I’ve seen that you have to essentially glue the secrets and the environment together yourself. Either app code needs to

From my little exposure to vault so far, I’ve seen that you have to essentially glue the secrets and the environment together yourself. Either app code needs to fetch them at runtime, or the secrets are looked up and written to some shell script/wrapper to launch your app, and that happens at deploy time. Envkey, as i understand it, provides the same server/backend features as vault, but also some integration goodness that lets you dynamically do the lookup and set the environment for just a given command upon invocation of that command. Basically it seems more batteries included. Again, my experience with either is pretty minimal, so research it yourself. I don’t think this is intended to replace or compete with Vault, but i do see it as another viable option for anyone who wants one (no matter their reason). Having more quality choices isn’t a bad thing :-)