<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Posts on wachs.software</title><link>https://wachs.software/blog/</link><description>Recent content in Posts on wachs.software</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 17 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://wachs.software/blog/index.xml" rel="self" type="application/rss+xml"/><item><title>Secrets in Kubernetes: sourcing and distribution with 1password and external-secrets</title><link>https://wachs.software/blog/2026-05-17-homelab-secret-setup/</link><pubDate>Sun, 17 May 2026 00:00:00 +0000</pubDate><guid>https://wachs.software/blog/2026-05-17-homelab-secret-setup/</guid><description>&lt;h1 id="managing-secrets-with-1password-and-external-secrets"&gt;Managing Secrets with 1Password and External Secrets&lt;/h1&gt;
&lt;p&gt;This guide walks through setting up automated secret management in Kubernetes using &lt;a href="https://developer.1password.com/docs/connect/"&gt;1Password Connect&lt;/a&gt; and the &lt;a href="https://external-secrets.io/"&gt;External Secrets Operator&lt;/a&gt;. Once configured, you can define &lt;code&gt;ExternalSecret&lt;/code&gt; resources that reference items in your 1Password vault — the operator syncs them into native Kubernetes &lt;a href="https://kubernetes.io/docs/concepts/configuration/secret/"&gt;Secrets&lt;/a&gt; automatically.&lt;/p&gt;
&lt;h2 id="foreword"&gt;Foreword&lt;/h2&gt;
&lt;p&gt;This post has been adapted from &lt;a href="https://rcwz.pl/2025-10-13-managing-secrets-with-1password-and-external-secrets/"&gt;this&lt;/a&gt; source post by &lt;a href="https://www.linkedin.com/in/artur-rychlewicz/"&gt;Artur Rychlewicz&lt;/a&gt;. I am very grateful for the post but had to adapt the contents for my own homelab setup. Steps to get the 1password operator and external-secrets to play together has been adapted from the source post.&lt;/p&gt;</description></item></channel></rss>