-
Notifications
You must be signed in to change notification settings - Fork 1
Pitch Brainstorming
Managing secrets in a cloud-based environment is complicated and cumbersome. There are a lot of bad ways to do it that are easy to talk yourself into.
Building on top of the best available secrets service, which is Hashicorp Vault.
- Building a UI
- Configuring with sensible defaults
- Deploying and clustering for the user
- Walking through the complicated bootstrapping
- Support
Cloud service providers. Basically anyone building a distributed product that makes at least some amount of requests to other services.
- Conjur
- Free and open source solutions
- Vault itself
- Fully integrated end-to-end solutions
- Kubernetes
Distributed software is the only viable solution going forward and security leaks are headlines more and more often. Increasing security and simplifying auditing of secrets access can save a lot of grief and potentially prevent massive leaks from poorly managed secrets.
It will involve building a UI for Vault and a landing page with a signup.
I posted the following to Hacker News and it was the #2 spot on the front page in an hour: https://news.ycombinator.com/item?id=10927043