Encrypt and Decrypt Secrets with SOPS (Secrets OPerationS)

Secrets OPerationS (SOPS) is an editor of encrypted files that supports YAML, JSON, ENV, INI, and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

[MichaelBushey]

Sops is awesome. There's a Terraform plugin, and it's trivial to add it to Argo CD.

[tobiadeniji]

You can store your secrets in a secrets manager and use a shim to inject it in your container.

[spenhouet]

We had a terrible experience with SOPS. It often didn't work/stop working. After updates things stopped working. It was always a nightmare to get working again. Using SOPS in a process with new employees isn't working great. We ditched SOPS again. Everyone hated that. I liked the concept, but the execution is terrible.

[ВладПонойко]

ESO, all the time deal with decryption encryption locally may result into human error which leads to secret expose through the git. It also creates additional overhead.
Used ansilble vault previously, that's not a human friendly solution.

[adrien-barret]

but ESO encrypt secret in base64 in k8s which is not really secure

[yotu]

Why sops? It's so complicated. I always use external secrets operator with vault or aws. Way more easier than that!!!

[ZiggleFingers]

And nix has nix-sops or agenix for using age