我正在将Nodejs项目从GCP迁移到Digitalocean。
我正在Digitalocean的Kubernetes群集上运行此Nodejs代码。我正在使用GitHub操作来自动构建Docker映像并将其部署到我的Kubernetes群集。一切都按预期工作，但我有一个问题。
在GCP上，我使用Secret Manager将秘密（数据库凭据，API密钥，...）注入我的Nodejs项目。我正在寻找关于Digitalocean的类似解决方案。我找到了雪橇ub，看起来很有趣，但我无法注册。
我从1Password Connect找到了这一点，但是看来我必须设置服务器？
有人知道一些有趣的工具或技巧以将秘密保护到我的Nodejs代码中吗？
I'm migrating a nodeJS project from GCP to DigitalOcean.
I'm running this nodeJS code on a kubernetes cluster in DigitalOcean. I'm using GitHub Actions to automatically build a docker image and deploy it to my kubernetes cluster. Everything works as expected, but I have a question.
On GCP, I used the secret manager to inject secrets (database credentials, API keys, ...) into my NodeJS project. I am looking for a similar solution on DigitalOcean. I have found SecretHub, it looks interesting but I'm unable to sign up.
I have found this from 1password connect, but it looks like I have to setup a server?
Does anyone know some interesting tool or trick to secure inject secrets into my nodejs code?
发布评论
评论（1）
是的，您可以查看主要与Kubernetes一起使用的Hashi Corp Vault，作为将配置和变量注入Kubernetes部署的秘密解决方案。
与Kubernetes建立并集成在一起很容易。
hashi corp vault： https://www.hashicorp.com/products/products/vaults/vault
Enterprise版本但是，您可以开源版本可以通过UI和登录面板来解决您的所有需求，可以将其用于生产目的，安全，安全且易于集成。
您可以在Kubernetes服务器上运行一个简单的POD（部署）。
在这里，您可以使用Minikube设置进行演示：
Yes, you can check out the Hashi corp vault which is mainly used with Kubernetes as a secret solution to inject the configuration and variables to the deployment of Kubernetes.
It's easy to set up and integrate with Kubernetes.
Hashi corp vault : https://www.hashicorp.com/products/vault
Enterprise version is paid one however you can open-source version which will solve your all needs with UI and login panel, you can use it for Production purpose it's safe, secure, and easy to integrate.
You can run one simple POD(deployment) on the Kubernetes server.
here you can follow the demo with minikube setup: https://learn.hashicorp.com/tutorials/vault/kubernetes-minikube?in=vault/kubernetes