Exploring External Secret Stores
Previously, we worked with the cloud providers AWS, Azure, and GCP. We ran our application and integrated it with the secret providers offered on these platforms. We used the Secrets management facilities of each cloud provider and benefited from the ecosystem of tools that the cloud providers provides us with. This made it feasible to tackle concerns such as auditing high availability and disaster recovery. In this chapter, we shall explore external secret stores that are not part of a cloud provider’s offerings.
We will cover the following topics:
- Overview of external secret store providers
- The different types of external secret stores, such as HashiCorp Vault, and CyberArk Secrets Manager
- Managing Secrets in an external secret store for Kubernetes
