Secrets

tip

• Sealed Secrets 最简单，但有时候用不了
  • 例如 secret 写在 value.yaml 的时候
• 建议配合 age, SOPS

• Bitnami Sealed Secrets
• External Secrets Operator
• 中心
  • Hashicorp Vault
  • lyft/confidant
    • DynamoDB 存储
• Banzai Cloud Bank-Vaults
• Helm Secrets
  • https://github.com/jkroepke/helm-secrets/wiki/ArgoCD-Integration
• Kustomize secret generator plugins
• isindir/sops-secrets-operator
• aws-secret-operator
• KSOPS
• argocd-vault-plugin
• Kubernetes Secrets Store CSI Driver
• 参考
  • #1364
  • https://argo-cd.readthedocs.io/en/stable/operator-manual/secret-management/