HashiCorp Vault
Password ManagersSecrets management and data protection for infrastructure
Replaces AWS Secrets Manager, Azure Key Vault
Best Kubernetes Password Managers for self-hosting
The 4 best Kubernetes password managers you can self-host, ranked by community traction.
Infisical
Password ManagersOpen-source secrets management platform for developers
Replaces AWS Secrets Manager, Doppler
OpenBao
Password ManagersOpen-source secrets management forked from Vault
Replaces AWS Secrets Manager, HashiCorp Vault
Yopass
Password ManagersSecurely share secrets with encrypted one-time links
Replaces 1Password, Doppler
No apps match these filters.
At a glance
| App | Deploy effort | Difficulty | Min. RAM | License | ★ Stars |
|---|---|---|---|---|---|
| HashiCorp Vault | Under-an-hour setup | Hard | 256 MB | BUSL-1.1 | 36,388 |
| Infisical | Under-an-hour setup | Medium | 512 MB | MIT | 29,746 |
| OpenBao | Under-an-hour setup | Hard | 256 MB | MPL-2.0 | 8,428 |
| Yopass | Under-an-hour setup | Easy | 64 MB | MIT | 3,171 |
Quick picks
- Most adopted: HashiCorp Vault (36,388 GitHub stars).
- Lightest footprint: Yopass (from 64 MB RAM, against 512 MB for the heaviest here).
- Licensing: 2 of 4 use MIT; check the rest individually if you plan to modify and redistribute.
Every option here is open-source and self-hostable, tagged Kubernetes within the password managers category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.