Don't use ENV variables for secret data (2017)

Re:Don't use ENV variables for secret data (2017) by jen20 on Monday July 13, 2020 @10:34AM (#23821161)

> This way I am not bound to [...] keywhiz

No, but you’re bound to Vault?

I agree that Vault is likely the best solution to this (dynamic secrets are super useful), but “not being coupled to something” is not a benefit you get from it.

[ Parent | on HN ]

Re:Don't use ENV variables for secret data (2017) by gchamonlive on Monday July 13, 2020 @10:45AM (#23821300)

You are right, I think that was a little harsh on my part. I can't really say much about keywhiz, I should have left it out of my comment.

Yes, you are tied to Hashicorp Vault once you adopt it, but it isn't much of a problem because you can easily redeploy it in a different cloud.

It might be true to keywhiz, so my comment wouldn't be valid to this point.

[ Parent | on HN ]