Maybe You Don't Need Kubernetes

Re:Maybe You Don't Need Kubernetes by nickbauman on Thursday March 28, 2019 @10:36AM (#19512575)

Q: Does it mean your secrets are stored in plain text in the container image?

A: No. It means the secrets are stored as environment variables in the container.

Q: What does the deploy wrapper do?

A: It prompts the developer to input the ansible vault password , decrypts the vault and injects the secrets into the environment.

Generally speaking, I follow the 12-factor approach:

[ Parent | on HN ]

Re:Maybe You Don't Need Kubernetes by ngrilly on Thursday March 28, 2019 @12:30PM (#19513773)

What do you mean by "injecting secrets into the environment"?

You mean a section in your app.yaml like this one:

    env_variables:
      DB_PASSWORD: "this is a secret"

As for as I know, in the Standard and Flex environments, app.yaml is the only way to define environment variables.

[ Parent | on HN ]