Hacker News new | ask | show | jobs
by f0e4c2f7 1554 days ago
Vault is what I would recommend. It's like a password manager for prod. When used correctly almost no one has to know the actual secrets and they can be easily reset and changed as long as you develop with that in mind.

Support with the Kubernetes secrets API is baked in and well documented.

Secrets manager and similar tools are fine too.