News for hackers. Stuff that matters.

A comment on Dockerfile Security Best Practices. Parent comment

Re:Dockerfile Security Best Practices by csunbird on Wednesday October 14, 2020 @11:18AM (#24777479)
> 1. OpenShift/Kubernetes Secrets mounted into the Pod at runtime.

Do you recommend mounting secrets as environment variables to the kubernetes pods instead of files?

[ Parent | on HN ]
Re:Dockerfile Security Best Practices by freedomben on Wednesday October 14, 2020 @11:29AM (#24777666)
Yes, that is by far my preference. Much more 12 factor app-ish and framework independent. A lot of Java apps will want files though, so sometimes it isn't possible.
[ Parent | on HN ]
Re:Dockerfile Security Best Practices by auspex on Thursday October 15, 2020 @08:44AM (#24787985)
Files should be used over environment variables. The file system at least as some form of RBAC through file permissions.
[ Parent | on HN ]