5 ms·

Tons of organizations run vault and consul as part of their k8s ecosystem so they don't directly compete. The vault CSI driver might be the single most install

Tons of organizations run vault and consul as part of their k8s ecosystem so they don't directly compete. The vault CSI driver might be the single most installed CSI driver across all the orgs I've worked for

busterarm 3y ago
You're completely missing it. If you are running Nomad as your orchestrator, because of the tight integrations you are almost certainly running vault for secrets and consul for service discovery/service mesh. The ecosystem of the three is the competitor to K8s. s/ someone who runs both ecosystems at scale.
- twunde 3y ago
  While the Nomad stack is a direct competitor to k8s, Consul and Vault are both heavily used alongside k8s. In fact, Consul had features that were only for k8s the last time I checked
  - busterarm 3y ago
    [flagged]
    - hdaz0017 3y ago
      There is a big difference though Terraform is the out and out winner in its market. All their other products are at best small x% share of a crowded market or dominated by another product.
      - ghshephard 3y ago
        Genuinely curious - other than Vault - what other product is there for secret management in the cloud infrastructure space. I get that CyberArk Conjur is big in the enterprise space, but I thought cloud users, even with k8s, mostly went with vault.
        candiddevmike 3y ago
        Most companies are probably using the secret manager provided by their cloud platform instead of Vault, especially after they tried to buy Vault.
        Alupis 3y ago
        Which is more than likely Vault + new carpets and paint.
        xyzzy_plugh 3y ago
        No, it's astronomically unlikely to be Vault at all.
        Alupis 3y ago
        It's far more likely to be Vault as a base, actually. The MPL would allow someone like Amazon to use Vault's source as a base, and so long as the core source wasn't modified Amazon would be under no obligation to make their modifications public. The MPL is a lot more "business" friendly than the GPL. The very fact that HashiCorp is changing their license and restricting use clearly indicates they see this threat as reality. Amazon/Microsoft/Google/Whoever using HashiCorp's work/effort but keeping all the money to themselves.
        candiddevmike 3y ago
        I don't know what you've heard but none of the cloud providers use HashiCorp Vault as the foundation for their secrets manager.
        xyzzy_plugh 3y ago
        Yes, they could, but no major cloud provider does. They're all bespoke. Read their white papers and it'll make more sense.
        oneplane 3y ago

busterarm 3y ago

You're completely missing it. If you are running Nomad as your orchestrator, because of the tight integrations you are almost certainly running vault for secrets and consul for service discovery/service mesh. The ecosystem of the three is the competitor to K8s. s/ someone who runs both ecosystems at scale.

twunde 3y ago
While the Nomad stack is a direct competitor to k8s, Consul and Vault are both heavily used alongside k8s. In fact, Consul had features that were only for k8s the last time I checked
- busterarm 3y ago
  [flagged]
  - hdaz0017 3y ago
    There is a big difference though Terraform is the out and out winner in its market. All their other products are at best small x% share of a crowded market or dominated by another product.
    - ghshephard 3y ago
      Genuinely curious - other than Vault - what other product is there for secret management in the cloud infrastructure space. I get that CyberArk Conjur is big in the enterprise space, but I thought cloud users, even with k8s, mostly went with vault.
      - candiddevmike 3y ago
        Most companies are probably using the secret manager provided by their cloud platform instead of Vault, especially after they tried to buy Vault.
        Alupis 3y ago
        Which is more than likely Vault + new carpets and paint.
        xyzzy_plugh 3y ago
        No, it's astronomically unlikely to be Vault at all.
        Alupis 3y ago
        It's far more likely to be Vault as a base, actually. The MPL would allow someone like Amazon to use Vault's source as a base, and so long as the core source wasn't modified Amazon would be under no obligation to make their modifications public. The MPL is a lot more "business" friendly than the GPL. The very fact that HashiCorp is changing their license and restricting use clearly indicates they see this threat as reality. Amazon/Microsoft/Google/Whoever using HashiCorp's work/effort but keeping all the money to themselves.
        candiddevmike 3y ago
        I don't know what you've heard but none of the cloud providers use HashiCorp Vault as the foundation for their secrets manager.
        xyzzy_plugh 3y ago
        Yes, they could, but no major cloud provider does. They're all bespoke. Read their white papers and it'll make more sense.
      - oneplane 3y ago