I think the unique value of Vault is not that it can change the locks so that old keys no longer work. For this it needs to understand how to reset keys on for example every database [0]. I don't think Sops does that.
I think there is a network effect to Vault that the more locks it can change the more people will use it and the more plugins will be added to it.
I think Vault is hard to use and we're thinking of integrating it in GitLab to give it a friendly UI [1].
I think there is a network effect to Vault that the more locks it can change the more people will use it and the more plugins will be added to it.
I think Vault is hard to use and we're thinking of integrating it in GitLab to give it a friendly UI [1].
0. https://www.vaultproject.io/docs/secrets/databases/index.htm...
1. https://gitlab.com/gitlab-org/gitlab-ee/issues/7569