CyberArk Conjur
Conjur from CyberArk is a Secrets management solution. It has a commercial and an open source version.
Conjur as a solution comes with the following benefits:
- Role-based access control (RBAC)
- Logging and auditing
- Integration with Kubernetes
- High availability
Let us take a closer look at Conjur and see how it achieves these qualities.
How Conjur works
Conjur requires the following components:
- Reverse Nginx proxy
- Conjur application
- Database
The reverse proxy is used to handle the TLS termination. It sits in front of the Conjur application. The Conjur application is a Ruby-based application and is responsible for securely storing Secrets. This application is backed by a PostgreSQL database.
High availability
Conjur uses Raft to make high availability possible. It has a leader–follower architecture. The master will serve inbound traffic. In case of a master failure, a follower instance will be promoted...
