Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Infisical – open-source secret management platform

infisical.com

Post reply on HN
Print view View original

31–40 of 59 posts

Re: Show HN: Infisical – open-source secret management platform

#31

Post by booi »

vmatsiiako wrote: post #29
aliasxneo wrote: post #28

Nice work! This looks very promising. The only thing I would add is the difference in packages seems a bit weird: - Five seems low for projects in the first tier - Projects are unlimited in the second tier, but environments are not? Is that a technical limitation?

Thanks for sharing this! No, this is not a technical limitation. These are just the usage numbers that we saw from our users – in other words, it is very rare that teams need to have over 10 environments. What is your use case for having more then 10 environments per project?

If you need more than 10, it's usually because it's 1 environment per developer or 1 environment per branch

Re: Show HN: Infisical – open-source secret management platform

#32

Post by vmatsiiako »

booi wrote: post #31
vmatsiiako wrote: post #29

Earlier quoted context omitted.

Thanks for sharing this! No, this is not a technical limitation. These are just the usage numbers that we saw from our users – in other words, it is very rare that teams need to have over 10 environments. What is your use case for having more then 10 environments per project?

If you need more than 10, it's usually because it's 1 environment per developer or 1 environment per branch

For the use case of having 1 env per developer: you can use our secret override feature which allows users to branch out from "env_X" with their own secret values

For the use case of having each environment per branch: yes, you would need to have more than 10 environments

Re: Show HN: Infisical – open-source secret management platform

#34

Post by vmatsiiako »

majkinetor wrote: post #33

How is this open source if we have limits with on premise installations?

There is no limits for the usage of any open source feature. There are limits for some enterprise-level features. The fact that there are some features behind the license doesn't make the rest of the codebase less "open source"

Read this interesting blog by Sid from GitLab about this: https://opencoreventures.com/blog/2023-07-open-core-is-misun...

Re: Show HN: Infisical – open-source secret management platform

#35

Post by number6 »

vmatsiiako wrote: post #34
majkinetor wrote: post #33

How is this open source if we have limits with on premise installations?

There is no limits for the usage of any open source feature. There are limits for some enterprise-level features. The fact that there are some features behind the license doesn't make the rest of the codebase less "open source" Read this interesting blog by Sid from GitLab about this: https://opencoreventures.com/blog/2023-07-open-core-is-misun...

Yes what op means is Free Software. And this rationalizing shows that open source is not synonymously with Free Software.

Read this interesting post by Richard Stallmann:

https://www.gnu.org/philosophy/open-source-misses-the-point....

Re: Show HN: Infisical – open-source secret management platform

#37

Post by mousetree »

iLoveOncall wrote: post #36

And still no tests in your codebase. This is absolutely ridiculous when it has been brought up in every past Show HN that you've done. I really really hope nobody is reckless enough to use a completely untested platform to manage secrets.

There are tests: https://github.com/Infisical/infisical/blob/main/backend/tes...

/s

Re: Show HN: Infisical – open-source secret management platform

#38

Post by nodesocket »

Very cool and congrats on the launch. Can you perhaps talk about pros/cons of using your Kubernetes operator vs 1Password Connect[1]? Seems like your operator would require writing some new CRDs where I believe 1Password Connect continues to use the existing kind: Secret. I believe it's possible to self-host Infisical server correct? Thus eliminating the external public requests and dependency on 1Password.

[1] https://developer.1password.com/docs/connect/

Re: Show HN: Infisical – open-source secret management platform

#39

Post by candiddevmike »

vmatsiiako wrote: post #10
microflash wrote: post #9

The fact that there are no Java or Rust SDKs available makes this a non-starter for me to even consider it.

Java SDK was actually already developed by one of our community members (Piyush Chhabra) and has to be reviewed: https://github.com/piyushchhabra/infisical-java Rust SDK is coming soon too. SDKs are not the most popular way of using Infisical though. You should look into our CLI (which most of the folks use) and API

Hmmm

> The main goal is to create an all-in-one secret management platform that targets developers

Re: Show HN: Infisical – open-source secret management platform

#40

Post by zie »

vmatsiiako wrote: post #8
lwhsiao wrote: post #3

How does this compare with Hashicorp Vault?

The main goal is to create an all-in-one secret management platform that targets developers and not just platform/security engineers (following the security shift left). Infisical is one platform where you can securely store your secrets, automatically sync them to 3rd party tools, continuously monitor code and prevent secret leaks, etc. We have more exciting features coming very soon. On top of that, we heard over a…

> On top of that, we heard over and over again that HCP Vault is too complicated for developers to set up and maintain.

WOW! I'm shocked, it's a single go binary and it has been ridiculously easy (I've been running it in production for years now).

I've never tried your product, as I've been happily using vault for a long time now. If I ever have to move off of vault for some reason, I'll give your stuff a try though. If it's been designed to be easier than vault, it must do everything for me! :)

Post reply on HN