3 ms·
Talos (and Talhelper) seem pretty reasonable so far. Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumber
by nathan_douglas 1y ago
Talos (and Talhelper) seem pretty reasonable so far. Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™.
> The link seems to be broken though.
Yeah, I'm a world-class infra engineer. smdh. Changed how the DNS record was created but didn't push my changes so they were reverted by a scheduled job facepalm
Think it's back now...
- cweagans 1y ago> Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™. I considered both of those and ended up using the External Secrets Operator + 1Password for my secrets. Maybe not the _best_ solution, but it saved a fair amount of effort on my part. > Think it's back now... It's back! Looking forward to reading!
- nathan_douglas 1y agoOh, that's super cool! I somehow missed that ESO and 1Password would work together. I set up a 1Password Connect Server at one point but ended up not doing much with it. Hmm...
- cweagans 1y agoDon’t even need connect! You can use a service account token. Retries if 1pass is down or whatever too!