Vault

Vault is a Secret Management and Data Encryption tool offered by HashiCorp. With Vault, you can store any type of secrets in Vault’s key-value store securely and manage access with secure Identity Management. It allows removing static and hardcoded secrets from source code and using dynamic secrets instead. Kubernetes by default stores secret objects in etcd as base64 encoded plain text. You can even encrypt Kubernetes secrets and configure automatic secret injection to pods using a sidecar container or a CSI.