Re:Show HN: Garnet – a developer-friendly, open-source secre...
by hashimanwaar on Wednesday June 09, 2021 @04:28PM
(#27452773)
I was reluctant to use Garnet as I always had a traditional approach with managing secrets. It wasn't until I accidentally deleted my sensitive and critical data that I started to look out for a better way of doing things. That's where Garnet came in. Very easy to install and getting started to use it's features. Definitely recommended for everyone before it's too late and you have to spend a couple of days trying to re-register your keys and stuff
[ Parent
| on HN ]
Re:Show HN: Garnet – a developer-friendly, open-source secre...
by bogota on Wednesday June 09, 2021 @04:40PM
(#27452932)
How does this work in production environments like k8s or aws?
Re:Show HN: Garnet – a developer-friendly, open-source secre...
by rst13 on Wednesday June 16, 2021 @05:51PM
(#27533876)
I've been using Garnet with my k8s setup. They don't have native kube api integration and I suggest developing a controller. But right now you can use the CLI to append any commands or scripts in your docker containers to supply them env variables at build or run time.
E.g. in a Dockerfile … RUN garnet run --service-key=$GARNET_SERVICE_KEY -- npm start
If this container is running on k8s, you can supply $GARNET_SERVICE_KEY as a k8s secret mounted on the pod