R/W/M Integration for External Secret Management in Kubernetes
VirtualSecrets provides a Kubernetes Extended API resource for managing secrets in external secret management systems like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager with full Read/Write/Mount operations.
helm install kubeobj oci://ghcr.io/appscode-charts/kubeobj \
--version v2026.2.27 \
--namespace stash --create-namespace \
--set-file global.license=/path/to/the/license.txt \
--wait --burst-limit=10000 --debug
Special Features
VirtualSecrets provides a Kubernetes Extended API resource for managing secrets in external secret management systems like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager with full Read/Write/Mount operations.
Extended API Resource
New Secret Kubernetes Extended API resource under virtual-secrets.dev API group
Read/Write/Mount Operations
Full support for Read, Write, and Mount operations for external secret management systems
SecretSource Integration
Configure connection to external secret managers through SecretSource custom resources
External Secret Storage
Store secrets in external secret managers like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager
CSI Driver Integration
Mount virtual secrets to pods using Secrets Store CSI Driver with mount subresource for SecretProviderClass
Kubernetes Secret Generation
Generate Kubernetes secrets from virtual secrets with auto-update capability using secret subresource
In-Memory Watch
Watch secrets in memory inside the operator for real-time synchronization
KubeDB Integration
Seamlessly integrated with KubeDB for storing database credentials in external secret managers
Multi-Provider Support
Support for multiple secret providers including HashiCorp Vault, AWS, Azure, and GCP
Multi-Replica Support
Scale horizontally with distributed in-memory cache for multi-replica deployments
