3 ms·
Using encrypted secrets provides a way better developer experience than using a vault. Typically, developers can’t change production secrets in vaults and need
by Atotalnoob 2y ago
Using encrypted secrets provides a way better developer experience than using a vault.
Typically, developers can’t change production secrets in vaults and need to follow some other protocols.
Encrypted secrets mean you deploy everything along side the secrets.
The developer experience is great, but the biggest issues I have faced while using Kubeseal were
1. Developers HAVE the secret in order to encrypt it. This can be not ideal as then they can use these secrets in production or leak them
2. The secret encryption key change causes the need to re encrypt everything.
3. People don’t understand the concept.
- prepend 2y agoI disagree. Using vaults isn’t that bad. And I’d also like developers to never actually know the secrets. It’s a learning curve, but I think it’s best to just bite the bullet and use a vault rather than trusting developers to know and manage secrets properly.
- nahtnam 2y agoAnother benefit is that debugging secret changes is a lot easier. We've had a couple of cases where someone changes the secret in a vault and that causes problems and no one can tell what changed between two deploys