--- title: Solving secret sprawl in multi-account Kubernetes with... description: Managing secrets across multiple Kubernetes clusters in separate cloud accounts creates operational sprawl. This post walks through using External Secrets... canonical: https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Solving secret sprawl in multi-account Kubernetes with External Secrets Operator | daily.dev og:description: Managing secrets across multiple Kubernetes clusters in separate cloud accounts creates operational sprawl. This post walks through using External Secrets... og:url: https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl og:image: https://api.daily.dev/og/posts/Z5vx9tlZl.png og:image:alt: Solving secret sprawl in multi-account Kubernetes with External Secrets Operator og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Solving secret sprawl in multi-account Kubernetes with External Secrets Operator **[CNCF](https://daily.dev/sources/cncf)** · 8 min read · 0 upvotes · 0 comments ## Summary Managing secrets across multiple Kubernetes clusters in separate cloud accounts creates operational sprawl. This post walks through using External Secrets Operator (ESO) with Bitwarden Secrets Manager to centralize secret storage and automatically sync credentials to all clusters. The step-by-step guide covers installing cert-manager for TLS, deploying ESO with Bitwarden SDK support, creating a ClusterSecretStore for cross-namespace access, and defining ExternalSecret resources that pull from Bitwarden and materialize as native Kubernetes Secrets. With a 15-minute refresh interval, rotating a credential in Bitwarden propagates to all clusters automatically, eliminating manual updates across accounts. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [How to Sync AWS Secrets Manager Secrets into Kubernetes with the External Secrets Operator](https://daily.dev/posts/how-to-sync-aws-secrets-manager-secrets-into-kubernetes-with-the-external-secrets-operator-dlh5pprjr) · freeCodeCamp · 0 upvotes · 0 comments - [GitLab Secrets Manager adds ESO, Terraform, API support](https://daily.dev/posts/gitlab-secrets-manager-adds-eso-terraform-api-support-b8lsupnhb) · GitLab · 1 upvotes · 0 comments - [How Maintainer Burnout Is Causing a Kubernetes Security Disaster](https://daily.dev/posts/how-maintainer-burnout-is-causing-a-kubernetes-security-disaster-walgdivnp) · The New Stack · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Solving secret sprawl in multi-account Kubernetes with External Secrets Operator","url":"https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl"},"datePublished":"2026-06-09T11:03:54.750Z","dateModified":"2026-06-09T11:04:20.002Z","description":"Managing secrets across multiple Kubernetes clusters in separate cloud accounts creates operational sprawl. This post walks through using External Secrets...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57c2899a603639f0ba28b1d5eb34a2d0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57c2899a603639f0ba28b1d5eb34a2d0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CNCF","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CNCF","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/55536a03390741eebd96d2f9b74d2d8d","url":"https://daily.dev/sources/cncf"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/solving-secret-sprawl-in-multi-account-kubernetes-with-external-secrets-operator-z5vx9tlzl","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,kubernetes","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CNCF","item":"https://daily.dev/sources/cncf"},{"@type":"ListItem","position":3,"name":"Solving secret sprawl in multi-account Kubernetes with External Secrets Operator"}]} ```