Secrets vault or similar to Instance metadata and user data (AWS IMDSv1/2)

I'm starting to hit my head into the needs for something similar to AWS's IMDS (using IPs fd00:ec2::254 & 169.254.169.254) with something connected to a Vault (ala HAshiCorp's Vault) for secrets and automated secret sharing/etc. without the secrets/passwords being unencrypted in the VM/LXC.

Thus I have to ask: What are others doing on ProxMox for similar functionality?

I've seen a OpenVSwitch talk-slides with possible steps/method to do something similar to IMDSv1, but was a tad "less...

Read more