Don't use ENV variables for secret data (2017)

Re:Don't use ENV variables for secret data (2017) by linkdd on Monday July 13, 2020 @10:04AM (#23820890)

Using AppRoles and consul-template. And if you're on Kubernetes, you can use https://github.com/sethvargo/vault-kubernetes-authenticator in an init container.

[ Parent | on HN ]

Re:Don't use ENV variables for secret data (2017) by gpmcadam on Monday July 13, 2020 @11:38AM (#23821887)

And how does k8s pass that value to the app?

[ Parent | on HN ]

Re:Don't use ENV variables for secret data (2017) by linkdd on Monday July 13, 2020 @12:34PM (#23822628)

You can use consul-template to generate a config file that lives in-memory (volumes.myvolume.emptyDir.medium = InMemory in a PodSpec).

[ Parent | on HN ]