Hacker News new | ask | show | jobs
by erulabs 1028 days ago
I’ve done a lot of good work with Hashicorp tools for many many years. But I’m extremely excited to move off Terraform, Nomad, Consul, Vault and the rest.

Actually quite happy with the future: CDK, CDK8s… it’s a bit of a mess currently but at least there’s a strong path forward and tons of innovation.
2 comments
mitjam 1028 days ago
Yes, I think the Terraform license change is an opportunity. For me, something like Crossplane is much more attractive than going to a community fork of Terraform. Cloud Native, continuous reconciliation loop, all the k8s tooling available, an API (k8s) out of the box and an open governance as it is a CNCF project.
link
oarmstrong 1028 days ago
What are you looking at for a Vault replacement?
link
erulabs 1027 days ago
Vault will be last on my list to replace. It's boring and it works and it's integration with K8s is actually much better than it's integration with Nomad.

Eventually though, I'd like to move to AWS Secrets Manager.

link
oarmstrong 1027 days ago
I agree that it’s boring and works well. It’s also what I’m most worried about finding a reasonable alternative, we can’t just not update Vault.

Sadly Secrets Manager doesn’t hit all the features I need. Really hoping for an OpenTF-style fork of Vault.

link