Back to all tools
CyberArk Conjur
Policy-driven secrets management with deep Kubernetes integration.
0Free-Limited
Security Secrets Management
Overview
Open-source & enterprise secrets management with strong Kubernetes integration and policy control.
Key Features
- Policy-as-code: define access rules in human-readable YAML policies
- Kubernetes authentication via service account token review
- Secrets Provider sidecar and init container for Kubernetes secret injection
- Credential rotation for databases and cloud platforms
- Fine-grained permission model: hosts, layers, variables, and grants
- Open-source Conjur OSS with enterprise DAP (Dynamic Access Provider) option
Real-World Workflows
Kubernetes workload secret injection
- 1Define a Conjur policy granting a Kubernetes service account access to specific secrets
- 2Deploy the Conjur Secrets Provider as an init container in the pod spec
- 3Init container authenticates to Conjur using the pod's service account
- 4Secrets are written to a shared in-memory volume before the app container starts
- 5Application reads secrets from the volume — no SDK changes required
Getting Started
# Run Conjur OSS with Docker Compose: git clone https://github.com/cyberark/conjur-quickstart cd conjur-quickstart && docker compose up -d ./start
Compare Alternatives
See how CyberArk Conjur stacks up against similar tools.