Mozilla SOPS with KMS and Git is underrated (2019)

Re:Mozilla SOPS with KMS and Git is underrated (2019) by atonse on Thursday April 30, 2020 @12:34PM (#23032802)

Anyone here used Vault to secure a Phoenix application? In particular, the idea that a short lived database credential can get auto-refreshed and then notify the Repo's supervisor to restart the repo with new credentials?

That's how I'd probably do it but I'd rather not reinvent the wheel if someone's already done it.

[ Parent | on HN ]

Re:Mozilla SOPS with KMS and Git is underrated (2019) by wolf4earth on Thursday April 30, 2020 @04:50PM (#23035944)

At the end of the day, what's the difference between restarting the app because you updated an environment variable, or restarting the repo?

In both cases you might have short service interruptions. So why not simply restart the app which is definitely more technology agnostic.

[ Parent | on HN ]

Re:Mozilla SOPS with KMS and Git is underrated (2019) by atonse on Friday May 01, 2020 @10:46PM (#23048686)

This would amount to potentially "restarting" the app every hour? That would cause potential errors every hour.

I think I saw somewhere that it's actually quite easy to do this with OTP. You can just tell the supervisor to kill the children and when they respawn, they'll pick up the new credentials.

[ Parent | on HN ]