Excellent choice for you business Secrets Management Solution
Use Cases and Deployment Scope
We leverage HashiCorp Vault capabilities for storing and managing our secrets and company passwords. HashiCorp Vault integrates with applications and tools to enable transparent secure sensitive information retrieval programmatically. By leveraging HashiCorp Vault we can go with IAC/CAC on almost everything we build. HashiCorp Vault also makes it easy to share secrets between team members and the organization.
Pros
- Store secrets
- Store configurations
- Integrate with kubernetes
- Audit log of changes
- Team secret sharing
- Real time in transit encryption
Cons
- Session Management is terrible to manage
- Monitoring is hard and not enough information
- User management
- Configuration is too complex
- More user friendly UI
Likelihood to Recommend
When you need to store secure information (secrets or configuration) for your kubernetes applications or just general secrets in a central place where team members can access. HashiCorp Vault enables granular access control and has terraform which makes it easy to manage it using IAC. It integrates really well in any cloud-native environment you are building your application.
I would not use it for small POC or companies due to the overhead of management and setup requirements. You could use another approach such as encrypted k8s secrets in git directly.
