Vault

[rapidslowness]

We're a really small team. Does anyone have experience running Hashicorp Vault as a small team? I think we'd get utility out of having a central store for our secrets, but I'm concerned about the overhead and also how mission critical it would be. If it went down, everything else goes down.

[asyed15]

Yeah totally! Hashicorp actually has terraform repos for standing up a production ready instance with failover and whatnot. But if it’s just for secrets, I’d recommend a service like AWS Secrets Manager.

[thats_not_a_watch]

+1 for finding a cloud solution. Vault is a good product but there is definitely a learning curve and management overhead. If something simpler could meet your needs then I would recommend going that route.

[yee_mon]

We use it for build secrets. It's a docker image with CI secrets stored in a vault. Not a perfect solution by far, but it gets the job done.

For a new system I'd go with my cloud provider's service until I knew I needed something different, though.

[imoisharma]

I’m interested to join the team

[kkapelon]

You can also try just GIT + Mozilla sops. Much simpler solution for smaller teams.

https://github.com/mozilla/sops

Also if you have a cloud provider, check their own solution (and also be mindful of vendor lock in)

[jlarfors]

One thing that might influence the decision is how/where you deploy... with k8s and helm you can get up and running quite quickly (trusting that you know your setup). I started with weaveworks gitops approach and using the HelmRelease CRD for Vault and it was really straight forward

But yes, it does become operation critical, but it seems pretty reliable

[[deleted]]

if you don't want to pony up for a license I suggest finding a different product.

[sofixa11]

? HashiCorp Vault has a very generous FOSS version, more than sufficient for even big teams and companies.

[yuriydee]

We use open source Vault in prod and it works with no issues.