Brandon B. Jozsa v1k0d3n

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

	# -- mode: ruby --
	# vi: set ft=ruby :

	# Vagrantfile API/sytax version. Don’t touch unless you know what you’re doing!
	VAGRANTFILE_API_VERSION = "2"
	Vagrant.configure(VAGRANTFILE_API_VERSION) do \|config\|

	# Variable Definitions:
	# ------------------------
	#

	# -- mode: ruby --
	# vi: set ft=ruby :
	require "yaml"
	require "vagrant-openstack-provider"

	# Variable defaults (see below for overrides)
	$ghost_version = "ubuntu/trusty64"
	$ghost_memory = 512
	$ghost_vcpus = 1
	$ghost_count = 1

	# -- mode: ruby --
	# vi: set ft=ruby :
	# NOTE: Variable overrides are in ./config.rb
	require "yaml"
	require "vagrant-openstack-provider"
	require "fileutils"

	# Use a variable file for overrides:
	CONFIG = File.expand_path("config.rb")
	if File.exist?(CONFIG)

	/opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:177:in `block in generate_inventory_groups': undefined method `end_with?' for ["kube-master"]:Array (NoMethodError)
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:164:in `each_pair'
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:164:in `generate_inventory_groups'
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:142:in `generate_inventory'
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:113:in `inventory_path'
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/base.rb:79:in `prepare_common_command_arguments'
	from /opt/vagrant/embedded/gems/gems/vagrant-1.8.4/plugins/provisioners/ansible/provisioner/host.rb:62:in `prepare_com

	# -- mode: ruby --
	# vi: set ft=ruby :
	# CONFIG OVERRIDES LOCATED IN ./config.rb:
	CONFIG = File.expand_path("config.rb")
	if File.exist?(CONFIG)
	require CONFIG
	end

	# PRE-UP DEFINITIONS:
	# Let's define what plugins our project requires first:

	root@JINKITDSTORE01:/volume1/@appstore/UniFi Controller# mongo --port 27117 < mongo_prune_js.js
	mongo: /lib/libstdc++.so.6: no version information available (required by mongo)
	mongo: /lib/libstdc++.so.6: no version information available (required by mongo)
	mongo: /lib/libstdc++.so.6: no version information available (required by mongo)
	MongoDB shell version: 3.2.1
	connecting to: 127.0.0.1:27117/test
	[dryrun] pruning data older than 7 days (1473196224883)...
	switched to db ace
	[dryrun] pruning 38 entries (total 38) from alarm...
	2016-09-13T17:10:24.906-0400 E QUERY [thread1] Error: count failed: { "errmsg" : "10320 BSONElement: bad type 22", "ok" : 0 } :

	bjozsa@megatron ~ ❯❯❯ analyze-local-images 31347bae83b8
	2016-09-19 14:54:26.423641 I \| Saving 31347bae83b8 to local disk (this may take some time)
	2016-09-19 14:54:29.278098 I \| Retrieving image history
	2016-09-19 14:54:29.278220 I \| Analyzing 14 layers...
	2016-09-19 14:54:29.278227 I \| Analyzing 2c0a4e60a7ab30a735c92fbb5310e9477956192bbb065b34a7fcb8e169b0987d
	2016-09-19 14:54:29.279617 I \| Analyzing 027993a3b5cffd6272f0891e62c8aa2a24c5955c09a56098174234d8452b425d
	2016-09-19 14:54:29.280781 I \| Analyzing a42428a792e24fb647ba5dae989e830208905b788ec9fe5ca999af8542511de7
	2016-09-19 14:54:29.281745 I \| Analyzing 9af0912d5afe6bdae86d1af5d667093ec99db3894a8f577d1ed36c95c83a6be8
	2016-09-19 14:54:29.282689 I \| Analyzing 5f2b525a42b49d22793547a1d0b419206d7c544bcf5f59f99df02323e0a36c3a
	2016-09-19 14:54:29.283579 I \| Analyzing 10ecb44384d336384d58f30b0ed98a87a465688370399a871d18c74b9fcc5c71

	PLAY [all] *********************************************************************

	TASK [setup] *******************************************************************
	ok: [kube2]
	ok: [kube3]
	ok: [kube1]

	TASK [kube-join : collect api endpoints from kubernetes masters] ***************
	changed: [kube1 -> None] => (item=kube1)
	changed: [kube2 -> None] => (item=kube1)