News for hackers. Stuff that matters.

A comment on Hashicorp Vault v1.0. Parent comment

Re:Hashicorp Vault v1.0 by yeukhon on Tuesday December 04, 2018 @08:58PM (#18605177)
You don't want to store secrets in state files. Imagine you run a CI/CD system where you run terraform plan. Now secrets is all public.
[ Parent | on HN ]
Re:Hashicorp Vault v1.0 by toomuchtodo on Tuesday December 04, 2018 @10:29PM (#18605484)
https://github.com/hashicorp/terraform/issues/516

TLDR: Terraform should use Vault for storing secrets in state, but does not support it yet.

(it is occasionally unavoidable storing secrets in state due to resources orchestrated)

[ Parent | on HN ]
Re:Hashicorp Vault v1.0 by zimbatm on Wednesday December 05, 2018 @04:25AM (#18606816)
That's fine. Secrets are market as "sensitive" and not displayed in the plan output.
[ Parent | on HN ]