4 ms·

Already happening. A control plane only cluster is an excellent replacement for Hashicorp Vault for example. See also the Cluster API to manage other clusters

Already happening. A control plane only cluster is an excellent replacement for Hashicorp Vault for example. See also the Cluster API to manage other clusters and Crossplane to manage anything Terraform would have managed.

darkwater 2y ago
> Already happening. A control plane only cluster is an excellent replacement for Hashicorp Vault for example. Vault? Don't you mean Terraform (Enterprise), or platforms based on TF that do that kind of thing (converging platform to its code definition, automatically). I don't really understand why (and how) one would use K8s API server as a replacement for HC Vault.
- nijave 2y ago
  It has RBAC, service accounts, and Secrets all with APIs. I guess you could automate provisioning storage accounts on nodes or have a system that creates tokens with the cluster key. Not sure that's really any better than not using it, though