Secure Credentials for GitOps Deployments Using the External Secrets Operator and AWS Secrets Manager
Blog post from Codefresh
The text discusses the challenges and solutions for managing secrets in GitOps deployments, particularly focusing on integrating AWS Secrets Manager with Kubernetes clusters using the External Secrets Operator (ESO). The article outlines the process of using ESO to retrieve secrets from AWS Secrets Manager and making them available as Kubernetes Secrets, which can then be utilized by applications deployed using Argo CD and Codefresh on an Amazon EKS cluster. It highlights the benefits of this approach, including the secure and dynamic fetching of secrets without storing sensitive information in Git, and provides a step-by-step guide to setting up the necessary infrastructure and configurations. The article also hints at an alternative method using the ArgoCD Vault Plugin for those interested in exploring different techniques for secret management in GitOps environments.