3 ms·
SG Operations member here: Definitely worth looking at solutions from the hosting platform you're infrastructure is on. In our case, we don't use Azure, so goi
by josegonzalez 10y ago
SG Operations member here:
Definitely worth looking at solutions from the hosting platform you're infrastructure is on. In our case, we don't use Azure, so going across the net for secrets was less than ideal.
- rjbwork 10y agoOh certainly. But they are a one time per app startup operation, so it's not a huge deal in terms of performance. It is somewhat less secure, of course, since it has to travel multiple network boundaries, but it's still encrypted over the wire so also may not be a huge deal in that realm either.
- josegonzalez 10y agoPerformance isn't an issue for us, since the existing processes stay alive until we've healthchecked new processes. That it's encrypted alleviates some concerns, but given the number of deploys we do a day - on over 50 services and counting - I'm hesitant to have secrets go over the network so often. That said, if you're in Azure, it's certainly the easiest way to go, and definitely not a bad approach.