2 ms·

> Already happening. A control plane only cluster is an excellent replacement for Hashicorp Vault for example. Vault? Don't you mean Terraform (Enterprise), or

> Already happening. A control plane only cluster is an excellent replacement for Hashicorp Vault for example. Vault? Don't you mean Terraform (Enterprise), or platforms based on TF that do that kind of thing (converging platform to its code definition, automatically). I don't really understand why (and how) one would use K8s API server as a replacement for HC Vault.

nijave 3y ago
It has RBAC, service accounts, and Secrets all with APIs. I guess you could automate provisioning storage accounts on nodes or have a system that creates tokens with the cluster key. Not sure that's really any better than not using it, though