5 ms·
Lots of cool projects around secrets lately: * Vault (by Hashicorp) [go] https://hashicorp.com/blog/vault.html https://hashicorp.com/blog/vault.html * Confida
by nodesocket 11y ago
Lots of cool projects around secrets lately:
* Vault (by Hashicorp) [go] https://hashicorp.com/blog/vault.html https://hashicorp.com/blog/vault.html
* Confidant (by Lyft) [Python] https://eng.lyft.com/announcing-confidant-an-open-source-secret-management-service-from-lyft-1e256fe628a3#.oc1x5ftls https://eng.lyft.com/announcing-confidant-an-open-source-sec...
* Keywhiz (by Sqaure) [Java] https://square.github.io/keywhiz/ https://square.github.io/keywhiz/
- patio11 11y agoWe use Vault so that our Rails et al passwords can get written by Ansible scripts without any repo having all the keys to our kingdom in plain text. Ease of use decently high, particularly once you standardize on a way to communicate secrets to arbitrary systems. (Ours is "Assume you pervasively have access to secrets via environment variables. The sole source of truth for them is in the Ansible repo.") Edit to add: it occurs to me, not for the first time, that I assumed Ansible Vault was Vault by Hashicorp simply because so much of our Devops stack is from Hashicorp.
- neduma 11y agoMore info/pointers pls. thx
- joslin01 11y agoDon't forget BlackBox by StackExchange: https://github.com/StackExchange/blackbox https://github.com/StackExchange/blackbox