Feature Request: Make OpenBao a default Secrets backend #284

New issue

Open

opened 2024-07-09 20:50:28 +00:00 by jessebot · 2 comments

jessebot commented

2024-07-09 20:50:28 +00:00

(Migrated from github.com)

Describe the feature you'd like, and why

I want to offer official support of OpenBao as the primary secrets backend, instead of using Bitwarden. I still want to have Bitwarden as an option, because it's useful for smaller home labs, but OpenBao would give us the power to more comfortably separate sensitive infra data from a personal password manager.

Describe alternatives you've considered, if any

We want will also support Vault, but it would be a secondary less supported option, because Vault, along with Hashicorp is now owned by IBM, and we remember what happened with centos.

Additional context

We'll need to make sure the Argo CD app, small-hack/argocd-apps:demo/openbao works and graduate it out of demo.
We need to test the new external secrets provider with each major app that uses bitwarden right now:
- matrix
- nextcloud
- home assistant
- zitadel
- vouch

## Describe the feature you'd like, and why I want to offer official support of OpenBao as the primary secrets backend, instead of using Bitwarden. I still want to have Bitwarden as an option, because it's useful for smaller home labs, but OpenBao would give us the power to more comfortably separate sensitive infra data from a personal password manager. ### Describe alternatives you've considered, if any We want will also support Vault, but it would be a secondary less supported option, because Vault, along with Hashicorp is now owned by IBM, and we remember what happened with centos. ### Additional context - [ ] We'll need to make sure the Argo CD app, [small-hack/argocd-apps:demo/openbao](https://github.com/small-hack/argocd-apps/tree/main/demo/openbao) works and graduate it out of demo. - [ ] We need to test the new external secrets provider with each major app that uses bitwarden right now: - [ ] matrix - [ ] nextcloud - [ ] home assistant - [ ] zitadel - [ ] vouch

jessebot commented

2024-07-15 08:45:23 +00:00

(Migrated from github.com)

We've add OpenBao as a default demo app here: https://github.com/small-hack/smol-k8s-lab/pull/286

jessebot commented

2024-07-17 17:48:26 +00:00

(Migrated from github.com)

#290 helps a bit with our goals here as it makes Bitwarden optional for our ArgoCD object :)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

small-hack/smol-k8s-lab#284

No description provided.

Rows
Columns