2 ms·
Most companies are probably using the secret manager provided by their cloud platform instead of Vault, especially after they tried to buy Vault.
by candiddevmike 3y ago
Most companies are probably using the secret manager provided by their cloud platform instead of Vault, especially after they tried to buy Vault.
- Alupis 3y agoWhich is more than likely Vault + new carpets and paint.
- xyzzy_plugh 3y agoNo, it's astronomically unlikely to be Vault at all.
- Alupis 3y agoIt's far more likely to be Vault as a base, actually. The MPL would allow someone like Amazon to use Vault's source as a base, and so long as the core source wasn't modified Amazon would be under no obligation to make their modifications public. The MPL is a lot more "business" friendly than the GPL. The very fact that HashiCorp is changing their license and restricting use clearly indicates they see this threat as reality. Amazon/Microsoft/Google/Whoever using HashiCorp's work/effort but keeping all the money to themselves.
- candiddevmike 3y agoI don't know what you've heard but none of the cloud providers use HashiCorp Vault as the foundation for their secrets manager.
- xyzzy_plugh 3y agoYes, they could, but no major cloud provider does. They're all bespoke. Read their white papers and it'll make more sense.