3 ms·

I wonder if anyone else does this. I have a private, env-var only repo per project that I very simply import (git clone) while building. I'm sure there are some

I wonder if anyone else does this. I have a private, env-var only repo per project that I very simply import (git clone) while building. I'm sure there are some risks like possible leakage if a team member's github account is compromised but it seems like a very nice, clean way of managing secrets. I even get the benefit of a version control.

firepoet 7y ago
We definitely avoid this approach. Fine grained access control per secret per environment is impossible. We use explicit secret management software.
- dhbradshaw 7y ago
  "We use explicit secret management software" This is interesting. Can you go into more detail?
  - wikibob 7y ago
    https://www.vaultproject.io/ https://www.vaultproject.io/ Fairly easy to integrate with Kubernetes too.