Simple and flexible tool for managing secrets
1–10 of 34 posts
Re: Simple and flexible tool for managing secrets
#2Also see
Re: Simple and flexible tool for managing secrets
#3To the maintainer of this repo, please make it accessible and easy to understand. The animated image is a bit too fast to read and follow, especially considering that there is absolutely no explanation right at the beginning for what the tool does AND why the tool is required for anyone. I had to scroll down a lot to get to the part where the important details are (which could answer the question "why should I even look at or consider this tool?").
Re: Simple and flexible tool for managing secrets
#4To the maintainer of this repo, please make it accessible and easy to understand. The animated image is a bit too fast to read and follow, especially considering that there is absolutely no explanation right at the beginning for what the tool does AND why the tool is required for anyone. I had to scroll down a lot to get to the part where the important details are (which could answer the question "why should I even l…
Yes, only based on the animated image I guess that the goal of the tool could be to encrypt just the passwords which are expected to be present in some plain text files in some bigger setups.
It would help to have some explanation of what the goals and use scenarios are, and general assumptions.
Re: Simple and flexible tool for managing secrets
#5This seems like a much easier-to-apply, automatic version of Ansible Vault's YAML variable encryption[0]. Personally I've never needed the extra per-YAML-entry control Ansible Vault gives you, so this seems a better approach.
[0] https://docs.ansible.com/ansible/latest/user_guide/vault.htm...
Re: Simple and flexible tool for managing secrets
#6Also see https://www.gopass.pw/
I don't think this is the same thing. Gopass is a fully featured user password manager, SOPS is a developer library for encrypting strings in files.
I guess one could use Mozilla SOPS to create something like gopass...
Re: Simple and flexible tool for managing secrets
#7If you're still interested in something similar tailored for kubernetes, take a look at https://github.com/bitnami-labs/sealed-secrets
Re: Simple and flexible tool for managing secrets
#8I am surprised Mozilla developers chose to write this project in Go instead of Rust, but do not get me wrong, I like Go, it is my primary programming language at work, and I always try to advocate for the right tool for the job. I still find it curious, though. I guess it was easier to translate Python to Go than to Rust.
Re: Simple and flexible tool for managing secrets
#9If you're still interested in something similar tailored for kubernetes, take a look at https://github.com/bitnami-labs/sealed-secrets
If you like the configuration of SOPS but you want to use bitnamis sealed secrets as a K8s native approach feel free to have a look at my alternative cli https://github.com/dschniepp/sealit
Re: Simple and flexible tool for managing secrets
#10I am surprised Mozilla developers chose to write this project in Go instead of Rust, but do not get me wrong, I like Go, it is my primary programming language at work, and I always try to advocate for the right tool for the job. I still find it curious, though. I guess it was easier to translate Python to Go than to Rust.
And a tool like that doesn't get any advantage from Rust - manual memory management would just be a chore with no benefits, and Go's crypto library is pretty good ( no idea about Rust's)