The External Secrets Enterprise is product suite is a premium product. It requires a specific subscription. Contact us for more information.
External Secrets Enterprise (ESE) Federation enables a centralized External Secrets instance (the Federation Server) to securely serve secret data to authenticated clients in Kubernetes clusters (the same or in multiple clusters). These clients can be other external-secrets instances or Application themselves via the helper tool esi-cli - acting as Federation Clients. This powerful feature allows for managing secrets centrally while distributing them securely to applications across different clusters, without exposing backend secret stores directly to client environments. Explore the following sections to understand and implement ESI Federation:

Core Concepts

Federation Server Setup

Federation Client Setup

Authentication & Authorization

Example Scenario