3 ms·
SOPS is only an alternative for vault KV Store. Even then, it requires a lot of manual plumbing when you have operators and Terraform pushing secrets or keys in
by Sayrus 3y ago
SOPS is only an alternative for vault KV Store. Even then, it requires a lot of manual plumbing when you have operators and Terraform pushing secrets or keys into Vault KV.
To replace SSH Sign and Cert Authority or databases engines, both generating short-lived credentials on-demand, SOPS will not easily solve the issue.
If you only need KV Store, SOPS experience is way better than Vault and maintenance cost is low.
- NewJazz 3y agoStep CA can do SSH CA.
- cvalka 3y agoSOPS + STEP + Teleport
- mdaniel 3y agoIn case you didn't see it: https://goteleport.com/blog/teleport-oss-switches-to-agpl-v3/ https://goteleport.com/blog/teleport-oss-switches-to-agpl-v3... and https://github.com/gravitational/teleport/pull/35259 https://github.com/gravitational/teleport/pull/35259 I readily admit it's not the same amount of :fu: as BuSL or whatever the fuck is going on over at Sentry but still :-( as compared to their much friendlier Apache 2