search

getsops / sops

Simple and flexible tool for managing secrets
https://getsops.io/
Mozilla Public License 2.0
16.83k stars 875 forks source link

Openstack Barbican KMS support #1651

Open poikilotherm opened 1 week ago

poikilotherm commented 1 week ago

Hello there!

Would there be interest in upstreaming 3d67bf1f4b14ec8f19c38c5481a32a016ab44357 (coming from https://github.com/getsops/sops/compare/main...clelange:sops:master)?

As an Openstack user, I would greatly benefit from using SOPS with Barbican in FluxCD.

Cheers!

(Tagging @clelange and @rochaporto, as they are the original authors)

clelange commented 1 week ago

@rochaporto had created https://github.com/getsops/sops/pull/683 back then, but what was missing (and still is) in this comment:

  1. There is a sizeable enough portion of our user base that would like this
  2. We can work out a detailed testing guide within this PR
  3. There is full coverage integration tests that can be ran locally and in CI within this PR

I think from our side (CERN community), we've found other solutions, but I agree that in general this would still be useful to have.

rochaporto commented 1 week ago

From my side we've moved away from this solution long ago. There are still people using sops but with a vault backend. But most are using vault directly, with secret retrieval at deployment time with plugins for templating.