This plugin is aimed at helping to solve the issue of secret management with GitOps and Argo CD. We wanted to find a simple way to utilize Vault without having to rely on an operator or custom resource definition. This plugin can be used not just for secrets but also for deployments, configMaps or any other Kubernetes resource. The argocd-vault-plugin works by taking a directory of yaml files that have been templated out using the pattern of
Tags | secret-management hashicorp-vault gitops argo-cd argocd-plugin |
Implementation | Go |
License | Apache |
Platform | Windows MacOS Linux |
A cross-platform .NET Library for HashiCorp's Vault - A Secret Management System.
dotnet-standard hashicorp-vault secret restclient vault-library vault-client vault securityNever leave your terminal to use secrets while developing, testing, and building your apps. Instead of custom scripts, tokens in your .zshrc files, visible EXPORTs in your bash history, misplaced .env.production files and more around your workstation -- just use teller and connect it to any vault, key store, or cloud service you like (Teller support Hashicorp Vault, AWS Secrets Manager, Google Secret Manager, and many more).
heroku aws vault secret-management secrets hashicorp gce cyberark conjurArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Application definitions, configurations, and environments should be declarative and version controlled. Application deployment and lifecycle management should be automated, auditable, and easy to understand.
argo kubernetes continuous-deployment gitops continuous-delivery docker cd cicd pipeline devops ci-cdArgo has set of open source tools for Kubernetes to run workflows, manage clusters, and do GitOps right.
continuous-deployment gitops machine-learning airflow workflow-engine argo dag knative argo-workflows ci-cd kubernetes-toolsThis tutorial walks through provisioning a highly-available HashiCorp Vault cluster on Google Kubernetes Engine using HashiCorp Terraform as the provisioning tool. This tutorial is based on Kelsey Hightower's Vault on Google Kubernetes Engine, but focuses on codifying the steps in Terraform instead of teaching you them individually. If you would like to know how to provision HashiCorp Vault on Kuberenetes step-by-step (aka "the hard way"), please follow Kelsey's repository instead.
gke vault terraform google-kubernetes-engineTested against Vault v0.1.2 and HEAD. Requires v0.1.2 or later.if you would like to be able to return parsed HCL data as a Python dict for methods that support it.
vault-library vault-client vault secret securityWraps the whole helm command. Slow on multiple value files. Run decrypted command on specific value files.
kubernetes encryption kms vault helm pgp secret-management secrets kubernetes-secrets k8s helm-charts vault-client decryption encryption-tool secrets-stored helm-plugin helm-plugins sops secrets-management helm-chartA HashiCorp Vault UI written with VueJS and Vault native Go API
vuejs vault-ui vue-admin bulma-css hashicorp-vault vaultThis Ansible role performs a basic Vault installation, including filesystem structure and example configuration. It can also bootstrap a minimal development or evaluation server or HA Consul-backed cluster in a Vagrant and VirtualBox based environment. See README_VAGRANT.md and the associated Vagrantfile for more details about the developer mode setup.
vagrant devops virtualbox consul vault ansible-role hashicorp vault-enterprise vault-tls vault-hsm vault-keyVault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, and auditing. Vault presents a unified API to access multiple backends: HSMs, AWS IAM, SQL databases, raw key/value, and more.
secret-store password-management certificate-management tokens certificate secretDevtron is designed as a self-serve platform for operationalizing and maintaining applications (AppOps) on kubernetes in a developer friendly way. It provides workflow which understands the domain of kubernetes, testing, CD, SecOps so that you dont have to write scripts. It supports reusable and composable components so that workflows are easy to contruct and reason through. Deploy to multiple kubernetes cluster.
kubernetes dashboard deployment workflow-engine continuous-deployment gke kubectl deployment-strategy release-automation kubernetes-dashboard appops kubernetes-deployment devtron deployment-pipeline deployment-automation gitops aks eks argocdEnvconsul provides a convenient way to launch a subprocess with environment variables populated from HashiCorp Consul and Vault. The tool is inspired by envdir and envchain, but works on many major operating systems with no runtime requirements. It is also available via a Docker container for scheduled environments.Envconsul supports 12-factor applications which get their configuration via the environment. Environment variables are dynamically populated from Consul or Vault, but the application is unaware; applications just read environment variables. This enables extreme flexibility and portability for applications across systems.
consul vaultDocker images are automatically built using an automated build on Docker Hub. We encourage that versioned images are used for production. By default, connection and authentication parameters must be configured by clicking on the configuration cog on the login page. Using environment variables (via docker), an administrator can pre-configure those parameters.
react docker devops ui vault hashicorp vault-uiAtomic secret provisioning for NixOS based on sops. Sops-nix decrypts secrets sops files on the target machine to files specified in the NixOS configuration at activation time. It also adjusts file permissions/owner/group. It uses either host ssh keys or GPG keys for decryption. In future we will also support cloud key management APIs such as AWS KMS, GCP KMS, Azure Key Vault or Hashicorp's vault.
nixops nixos sops kropsRead the docs at gomplate.hairyhenderson.ca. gomplate is a template renderer which supports a growing list of datasources, such as: JSON (including EJSON - encrypted JSON), YAML, AWS EC2 metadata, BoltDB, Hashicorp Consul and Hashicorp Vault secrets.
template cli cloud config docker devops devops-tools consul vault boltdb sysadmin sysops templatingThis project provides a convenient way to populate values from Consul into the file system using the consul-template daemon.The daemon consul-template queries a Consul or Vault cluster and updates any number of specified templates on the file system. As an added bonus, it can optionally run arbitrary commands when the update process completes. Please see the examples folder for some scenarios where this functionality might prove useful.
consul vaultA native Node module to get, add, replace, and delete passwords in system's keychain. On macOS the passwords are managed by the Keychain, on Linux they are managed by the Secret Service API/libsecret, and on Windows they are managed by Credential Vault. Currently this library uses libsecret so you may need to install it before running npm install.
keychain libsecret credential-storage password passwords credential credentials vault credential-vaultThomer's Music Vault is a GNU/Linux streaming music server (jukebox, sort of) that presents a pretty interface to a CD music collection. Thomer's Music Vault takes care of generating playlists and encoding/decoding music in various formats.
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a Container Storage Interface (CSI) volume. The Secrets Store CSI driver secrets-store.csi.k8s.io allows Kubernetes to mount multiple secrets, keys, and certs stored in enterprise-grade external secrets stores into their pods as a volume. Once the Volume is attached, the data in it is mounted into the container's file system.
kubernetes hashicorp-vault csi azure-keyvault aws-secrets-manager k8s-sig-auth gcp-secret-manager csi-secrets-store mount-multiple-secretssops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault and PGP.
security secret-distribution devops aws pgp secret-store vault
We have large collection of open source products. Follow the tags from
Tag Cloud >>
Open source products are scattered around the web. Please provide information
about the open source projects you own / you use.
Add Projects.