hashicorp/vault-secrets-operator repository overview

⁠Vault Secrets Operator Official Image Build

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets. It supports syncing from Vault Community/Enterprise⁠ and HCP Vault Secrets⁠.

⁠Overview

The Vault Secrets Operator operates by watching for changes to its supported set of Custom Resource Definitions (CRD). Each CRD provides the specification required to allow the Operator to synchronize a Vault Secrets to a Kubernetes Secret. The Operator writes the source Vault secret data directly to the destination Kubernetes Secret, ensuring that any changes made to the source are replicated to the destination over its lifetime. In this way, an application only needs to have access to the destination secret in order to make use of the secret data contained within.

For more info, please see the developer docs⁠.