d4fc82eb11
* Added draft for SecretSink Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com> * Fixing typo and adding more comments Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com> * Dedicating new CRD to SecretSink Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com> * Redoing secretSink proposal Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com> * Moved selector to spec level. Removed secretStore selector from remoteRef Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com> * Update wording on design/001-secretsink.md Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> Co-authored-by: Moritz Johner <moolen@users.noreply.github.com> |
||
|---|---|---|
| .github | ||
| apis | ||
| assets | ||
| cmd | ||
| config/crds/bases | ||
| deploy | ||
| design | ||
| docs | ||
| e2e | ||
| hack | ||
| overrides | ||
| pkg | ||
| terraform | ||
| .editorconfig | ||
| .gitignore | ||
| .golangci.yaml | ||
| ADOPTERS.md | ||
| changelog.json | ||
| CNAME | ||
| Dockerfile | ||
| go.mod | ||
| go.sum | ||
| LICENSE | ||
| main.go | ||
| Makefile | ||
| PROJECT | ||
| README.md | ||
| SECURITY.md | ||
| tools.go | ||
External Secrets
The External Secrets Operator reads information from a third party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Multiple people and organizations are joining efforts to create a single External Secrets solution based on existing projects. If you are curious about the origins of this project, check out this issue and this PR.
Supported Backends
- AWS Secrets Manager
- AWS Parameter Store
- Akeyless
- Hashicorp Vault
- Google Cloud Secrets Manager
- Azure Key Vault
- IBM Cloud Secrets Manager
- Yandex Lockbox
- Gitlab Project Variables
- Alibaba Cloud KMS (Docs still missing, PRs welcomed!)
- Oracle Vault
- Generic Webhook
- Kubernetes
Stability and Support Level
Internally maintained:
| Provider | Stability | Contact |
|---|---|---|
| AWS SM | stable | ESO Org |
| AWS PS | stable | ESO Org |
| Hashicorp Vault | stable | ESO Org |
| GCP SM | stable | ESO Org |
Community maintained:
| Provider | Stability | Contact |
|---|---|---|
| Azure KV | beta | @ahmedmus-1A @asnowfix @ncourbet-1A @1A-mj |
| IBM SM | alpha | @knelasevero @sebagomez @ricardoptcosta |
| Yandex Lockbox | alpha | @AndreyZamyslov @knelasevero |
| Gitlab Project Variables | alpha | @Jabray5 |
| Alibaba Cloud KMS | alpha | @ElsaChelala |
| Oracle Vault | alpha | @KianTigger @EladGabay |
| Akeyless | alpha | @renanaAkeyless |
| Generic Webhook | alpha | @willemm |
Documentation
External Secrets Operator guides and reference documentation is available at external-secrets.io.
Support
You can use GitHub's issues to report bugs/suggest features or use GitHub's discussions to ask for help and figure out problems. You can also reach us at our KES and ESO shared channel in Kubernetes slack.
Even though we have active maintainers and people assigned to this project, we kindly ask for patience when asking for support. We will try to get to priority issues as fast as possible, but there may be some delays.
Contributing
We welcome and encourage contributions to this project! Please read the Developer and Contribution process guides. Also make sure to check the Code of Conduct and adhere to its guidelines.
Bi-weekly Development Meeting
We host our development meeting every odd wednesday at 5:30 PM Berlin Time on Jitsi. Meeting notes are recorded on hackmd.
Anyone is welcome to join. Feel free to ask questions, request feedback, raise awareness for an issue or just say hi ;)
Security
Please report vulnerabilities by email to contact@external-secrets.io, also see our security policy for details.
Adopters
Please create a PR and add your company or your project to our ADOPTERS file if you are using our project!
Kicked off by
