Secret resolution from secret store (HashiCorp Vault,…)

[abhijith-darshan]

Is there any plan to implement secret resolutions from a secret backend like HashiCorp vault, Azure Key Vault etc…

I know there is a possibility to use external-secret resources but the relations get very nested and it would be easier if Kro can do it?

[eliihen]

I can't speak on behalf of the project as I'm not a contributor, but IMO what makes Crossplane so complicated is that it is too flexible at the cost of usability. Adding more and more features requires an architecture that increases the complexity of the project as a whole.

I feel what kro gets right is "do one thing and do it well", instead relying on CRDs and Operators for more complex functionality. If you leave the integrations with secret backends to a separate operator, all kro needs to be able to do is read values from configmaps and secrets, which is much more manageable.