Red Hat OpenShift Container Platform

About the External Secrets Operator for Red Hat OpenShift

Use the External Secrets Operator for Red Hat OpenShift to integrate the external-secrets application with the Red Hat OpenShift Container Platform cluster. The external-secrets application fetches secrets stored in external providers such as AWS Secrets Manager, HashiCorp Vault, Google Secret Manager, Azure Key Vault, IBM Cloud Secrets Manager, and AWS Systems Manager Parameter Store, and integrates them with Kubernetes in a secure manner.

Using the External Secrets Operator ensures the following:

Decouples applications from the secret-lifecycle management.
Centralizes secret storage to support compliance requirements.
Enables secure and automated secret rotation.
Supports multi-cloud secret sourcing with fine-grained access control.
Centralizes and audits access control.

Do not attempt to use more than one External Secrets Operator in your cluster. If you have a community External Secrets Operator installed in your cluster, you must uninstall it before installing the External Secrets Operator for Red Hat OpenShift.

For more information about the external-secrets application, see "external-secrets application" in Additional resources.

Use the External Secrets Operator to authenticate with the external secrets store, retrieve secrets, and inject the retrieved secrets into a native Kubernetes secret. This method removes the need for applications to directly access or manage external secrets.