sops icon indicating copy to clipboard operation
sops copied to clipboard

hc-vault: Support for kubernetes auth

Open JuniorJPDJ opened this issue 1 year ago • 1 comments

There are code examples here: https://developer.hashicorp.com/vault/docs/auth/kubernetes#code-example

argocd-vault-plugin can already use it and it would be the best possible KMS alternative for on-premise usage https://argocd-vault-plugin.readthedocs.io/en/stable/backends/#kubernetes-authentication

I personally prefer sops with helm-secrets than AVP as it's visible in git tree when secret changes and you can actually follow the changes later. Not talking about encrypting with spare key (eg. GPG) for some disaster case.

This allows usage of sops with helm-secrets in argocd-repo-server without providing any token to HC Vault, just using ServiceAccount.

Probably more usecases can be found, but IMO this one is major and it's actually my usecase.

JuniorJPDJ avatar Mar 13 '24 01:03 JuniorJPDJ