News for hackers. Stuff that matters.

A comment on Don't use ENV variables for secret data (2017). Parent comment

Re:Don't use ENV variables for secret data (2017) by gpmcadam on Monday July 13, 2020 @09:57AM (#23820806)
How do you share the token to access Vault to your code?
[ Parent | on HN ]
Re:Don't use ENV variables for secret data (2017) by linkdd on Monday July 13, 2020 @10:04AM (#23820890)
Using AppRoles and consul-template. And if you're on Kubernetes, you can use https://github.com/sethvargo/vault-kubernetes-authenticator in an init container.
[ Parent | on HN ]
Re:Don't use ENV variables for secret data (2017) by gpmcadam on Monday July 13, 2020 @11:38AM (#23821887)
And how does k8s pass that value to the app?
[ Parent | on HN ]
Re:Don't use ENV variables for secret data (2017) by linkdd on Monday July 13, 2020 @12:34PM (#23822628)
You can use consul-template to generate a config file that lives in-memory (volumes.myvolume.emptyDir.medium = InMemory in a PodSpec).
[ Parent | on HN ]