Okteto
oktetoA Tool to Develop Applications on Kubernetes.
A Tool to Develop Applications on Kubernetes.
Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.
contexts.*.tokenThe rest of the file syncs. Only these values are lifted out and kept in your secret store.
Not a subtraction from the paths above: this is everything else Okteto writes in your home directory that is state, not configuration. It keeps a whole-home manager like chezmoi from sweeping those up, and it still holds if the synced paths are ever widened.
contexts.*.tokenLifted into your secret store; the rest of the file syncs.
Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.
Opens otty://sync/add/okteto. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.
Every one of these keeps the credential file out.