I’ve worked with some pretty rotten software, but management software is easily the most user unfriendly, so my vote goes to HPSM.
I’ve worked with some pretty rotten software, but management software is easily the most user unfriendly, so my vote goes to HPSM.
Everything has its quirks. It’s quite hard to manage secrets in Nix without dropping them to nix store. Sops-nix is probably closest to ansible-vault, but I’ve yet to see some good solution for short lived secrets. (For example secrets that are only needed to deploy something but not to run it)