HashiCorp Vault Secrets Management.

Vault securely stores and tightly controls access to tokens, passwords, certificates, and API keys.

Vault encrypts secrets in transit and at rest. It provides dynamic secrets—generating unique, short-lived database credentials on-demand instead of relying on static passwords. Kubernetes can integrate with Vault using the Vault Agent sidecar to automatically inject secrets into Pods as temporary files or environment variables without exposing them in etcd.