Secrets Store CSI Driver is a Kubernetes component that integrates external secrets management systems with containerised workloads. It enables applications to access passwords, cryptographic keys and certificates stored outside Kubernetes by mounting them directly into pod filesystems.
The software uses the Container Storage Interface (CSI) to expose sensitive information as files within containers. Applications can therefore consume credentials without requiring them to be stored as conventional Kubernetes Secret objects.
Unlike operators that primarily synchronise external credentials into Kubernetes Secrets, Secrets Store CSI Driver focuses on making externally managed information available directly to running workloads. It supports several providers and allows administrators to control how secrets are retrieved and presented.
This is free and open source software.
Key Features
- CSI volume integration – mounts externally managed secrets, keys and certificates directly into Kubernetes pods.
- Multiple secret objects – combines several credentials from an external provider into a single mounted volume.
- Pluggable provider architecture – integrates with supported external secrets management services through dedicated provider implementations.
- SecretProviderClass resources – define external objects, provider configurations and workload-specific secret mappings.
- Kubernetes Secret synchronization – optionally mirrors mounted credentials into standard Kubernetes Secret objects.
- Automatic rotation – optionally refreshes mounted secrets when values change in the external provider.
- Multiple provider support – allows different secrets management providers to operate within the same Kubernetes cluster.
- Pod-specific access – retrieves and exposes credentials in the context of individual workloads.
- Secret version tracking – records information about mounted objects and their versions through SecretProviderClassPodStatus resources.
- Configurable object mapping – specifies which external credentials should be mounted and how their files should be named.
- Workload portability – separates external provider configuration from application deployment definitions.
- Cross-platform support – works with Linux and Windows Kubernetes containers.
Website: github.com/kubernetes-sigs/secrets-store-csi-driver
Support:
Developer: Kubernetes SIG Auth
License: Apache License 2.0
Secrets Store CSI Driver is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Secrets Management | |
|---|---|
| OpenBao | Manage, store, and distribute sensitive data |
| SOPS | Editor of encrypted files |
| Sealed Secrets | One-way encrypted secrets |
| Vault | Tool for securely accessing secrets |
| Infisical | Secrets management, PKI, and SSH access |
| fnox | Encrypted/remote secret manager |
| Envy | Slick TUI for browsing secrets and a CLI for automation |
| Chamber | Modern secret management solution |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.