Ycsecurity/kubernetes-security/encrypt_and_keys/secret-management

Secret Management with Secret Manager (Lockbox)

Need in Secret Manager solutions

Secret Manager in Yandex.Cloud

Yandex.Cloud supports two Secret Managers out-of-the-box:

• Yandex Lockbox (embedded product).
• HashiCorp Vault with KMS support (from the marketplace).

Description of Lockbox-to-K8s integration

The official integration is carried out using the open-source External Secrets solution (https://github.com/external-secrets).

Setup instructions

Link to the official documentation

Use cases for access and object differentiation

https://external-secrets.io/guides-multi-tenancy/

Instructions for integrating HashiCorp Vault with K8s

https://learn.hashicorp.com/tutorials/vault/kubernetes-minikube?in=vault/kubernetes