HashiCorp and Google: easing secret and infrastructure management

Re:HashiCorp and Google: easing secret and infrastructure ma... by kaishiro on Tuesday September 19, 2017 @06:50PM (#15289454)

Responding not so much with a solution but with a question. We currently encrypt files in place with gpg (secretKeys.json => secretKeys.json.encrypted) and have the source file (secretKeys.json) git ignored while the derivative file is just added to the repo.

This is admittedly a bit low tech, but could someone more well versed than me tell me what's wrong with this setup.

[ Parent | on HN ]

Re:HashiCorp and Google: easing secret and infrastructure ma... by czbond on Tuesday September 19, 2017 @07:13PM (#15289553)

Then as part of your code or deployment, your private key is on a server and some process decrypts it? It is low tech, but a good solution. Only concern would be how that private key is stored, and if it could be compromised. (edited)

[ Parent | on HN ]

Re:HashiCorp and Google: easing secret and infrastructure ma... by kaishiro on Tuesday September 19, 2017 @07:30PM (#15289634)

Thanks czbond. And yeah, that's precisely the setup. Appreciate the response.

[ Parent | on HN ]