Calendar Favorite 1 Streamline Icon: https://streamlinehq.com  Mark Your Calendars: The next VSecM Contributor Sync will be on... Thursday, 2024-08-30 at 8:00am Pacific time.
Rating Star 1 Streamline Icon: https://streamlinehq.com  Star VMware Secrets Manager to show your support. Help us reach out to even more people with this amazing tech.

ADR-0011: Keep Things Minimal: Do One Thing Well

Link Keep Things Minimal: Do One Thing Well

  • Status: accepted
  • Date: 2024-05-10
  • Tags: design, philosophy

Link Context and Problem Statement

At a 5000-feet level, VMware Secrets Manager is a secure Key-Value store.

It can securely store arbitrary values that you, as an administrator, associate with keys. It does that, and it does that well.

Any other feature that we add to the project should be in service of this core. And any additional feature introduced should be evaluated with utmost scrutiny.

We do not add new features just because they are cool. Nor do we add new features to reach feature parity with other projects.

Link Decision Drivers

  • We want to keep the project simple and easy to understand.
  • We want to keep the project attack surface minimal.
  • We want to limit the scope of the project based on the core team and the community’s bandwidth.
  • We believe that a project that does one thing well is better than a project that does many things poorly.
  • We also believe that other tools can complement VMware Secrets Manager, and we do not need to add all features in this project. For example, instead of creating an internal policy engine, we can rely on OPA. Or instead of creating a new identity control plane, we can rely on SPIFFE.

Link Considered Options

  1. Say yes to every feature request.
  2. Prioritize features based on the core team’s bandwidth, the community’s bandwidth, and the project’s vision.

Link Decision Outcome

Chosen option: “option 2”, because it is common sense.

Link Positive Consequences

  • The project will remain simple and easy to understand.
  • The project will have a minimal attack surface.
  • The project will be able to focus on doing one thing well.
  • The project will be able to leverage other tools in the ecosystem.
  • The project will be able to keep the scope in check.
  • The project will be able to deliver value to the users.

Link Negative Consequences

  • The project may not be able to cater to every feature request.
  • The project may not be able to reach feature parity with other projects.
  • The project may not be able to keep everyone happy.

 

 

Link ADRs

You can view the ADRs by browsing this following list:

edit this page ✏️