Integrating Kubernetes ESO with DevOps Secrets Vault

Third-party vendors create and maintain this integration. Delinea does not guarantee that the integration will work properly or that it respects Delinea product limitations. Delinea has not reviewed this integration and Delinea Support staff can only assist with the Delinea side of setup.

This is a Kubernetes ESO integration, and should not be confused with the Secret Server External Secret feature.

The Kubernetes ESO (External Secrets Operator) allows you to synchronize secrets from external APIs into Kubernetes. ESO is a collection of custom API resources—ExternalSecret, SecretStore, and ClusterSecretStore — that provide a user-friendly abstraction for the external API, storing and managing the lifecycle of secrets for you. The integration between Kubernetes ESO and DevOps Secrets Vault reads information from external APIs and automatically injects the values into a Kubernetes Secret.

ESO extends Kubernetes with Custom Resources, which define where secrets live and how to synchronize them. The controller fetches secrets from an external API and creates Kubernetes secrets. If the secret from the external API changes, the controller will reconcile the state in the cluster and update the secrets accordingly.

To learn more about this integration, click here.