Azure Key Vault To Kubernetes
| Project Name | Stars | Downloads | Repos Using This | Packages Using This | Most Recent Commit | Total Releases | Latest Release | Open Issues | License | Language |
|---|---|---|---|---|---|---|---|---|---|---|
| Sealed Secrets | 6,210 | 19 | 2 days ago | 123 | September 23, 2022 | 71 | apache-2.0 | Go | ||
| A Kubernetes controller and tool for one-way encrypted Secrets | ||||||||||
| Ello Ios | 739 | a year ago | 3 | mit | Swift | |||||
| Ello's open source iOS app | ||||||||||
| Atsea Sample Shop App | 590 | a year ago | apache-2.0 | Java | ||||||
| A sample app that uses a Java Spring Boot backend connected to a database to display a fictitious art shop with a React front-end. | ||||||||||
| Kubernetes Reflector | 570 | 6 days ago | 17 | mit | C# | |||||
| Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates. | ||||||||||
| Flickraw | 507 |  | 716 | 49 | 4 years ago | 32 | March 13, 2019 | 6 | mit | Ruby |
| Ruby library to access flickr api. | ||||||||||
| Azure Key Vault To Kubernetes | 396 | 6 days ago | 6 | December 01, 2021 | 77 | apache-2.0 | Go | |||
| Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure to use Azure Key Vault secrets, keys and certificates in Kubernetes. | ||||||||||
| Ansible Vault | 330 | 5 years ago | 8 | bsd-3-clause | Python | |||||
| ansible lookup plugin for secrets stored in Vault(by HashiCorp) | ||||||||||
| Vault Java Driver | 304 | 41 | 21 | a year ago | 12 | December 16, 2019 | 105 | Java | ||
| Zero-dependency Java client for HashiCorp's Vault | ||||||||||
| Cert Exporter | 256 | 5 months ago | 7 | October 14, 2021 | 14 | apache-2.0 | Go | |||
| A Prometheus exporter that publishes cert expirations on disk and in Kubernetes secrets | ||||||||||
| Spring Vault | 246 | 35 | 14 | a month ago | 25 | November 25, 2022 | 11 | apache-2.0 | Java | |
| Provides familiar Spring abstractions for HashiCorp Vault | ||||||||||
Azure Key Vault to Kubernetes
Azure Key Vault to Kubernetes (akv2k8s) makes Azure Key Vault secrets, certificates and keys available to your applications in Kubernetes, in a simple and secure way.
Documentation available at https://akv2k8s.io. Join our Slack Workspace to ask questions to the akv2k8s community.
Overview
Azure Key Vault to Kubernetes (akv2k8s) will make Azure Key Vault objects available to Kubernetes in two ways:
- As native Kubernetes
Secrets - As environment variables directly injected into your Container application
The Azure Key Vault Controller (Controller for short) is responsible for synchronizing Secrets, Certificates and Keys from Azure Key Vault to native Secrets in Kubernetes.
The Azure Key Vault Env Injector (Env Injector for short) is responsible for transparently injecting Azure Key Vault secrets as environment variables into Container applications, without touching disk or exposing the actual secret to Kubernetes.
Goals
The goals for this project were:
- Avoid a direct program dependency on Azure Key Vault for getting secrets, and adhere to the 12 Factor App principle for configuration (https://12factor.net/config)
- Make it simple, secure and low risk to transfer Azure Key Vault secrets into Kubernetes as native Kubernetes secrets
- Securely and transparently be able to inject Azure Key Vault secrets as environment variables to applications, without having to use native Kubernetes secrets
All of these goals are met.
Installation
For installation instructions, see documentation at https://akv2k8s.io/installation/.
Credits
Credit goes to Banzai Cloud for coming up with the original idea of environment injection for their bank-vaults solution, which they use to inject Hashicorp Vault secrets into Pods.
Contributing
Development of Azure Key Vault for Kubernetes happens in the open on GitHub, and we encourage users to:
- Send a pull request with
- any security issues found and fixed
- your new features and bug fixes
- updates and improvements to the documentation
- Report issues on security or other issues you have come across
- Help new users with issues they may encounter
- Support the development of this project and star this repo!
Sparebanken Vest has adopted a Code of Conduct that we expect project participants to adhere to. Please read the full text so that you can understand what actions will and will not be tolerated.
Azure Key Vault to Kubernetes is licensed under Apache License 2.0.
Contribute to the Documentation
The documentation is located in a separate repository at SparebankenVest/akv2k8s-website. We're using Gatsby + MDX (Markdown + JSX) to generate static docs for https://akv2k8s.io.
