5 ms·
Anyone here used Vault to secure a Phoenix application? In particular, the idea that a short lived database credential can get auto-refreshed and then notify th
by atonse 7y ago
Anyone here used Vault to secure a Phoenix application? In particular, the idea that a short lived database credential can get auto-refreshed and then notify the Repo's supervisor to restart the repo with new credentials?
That's how I'd probably do it but I'd rather not reinvent the wheel if someone's already done it.
- wolf4earth 7y agoAt the end of the day, what's the difference between restarting the app because you updated an environment variable, or restarting the repo? In both cases you might have short service interruptions. So why not simply restart the app which is definitely more technology agnostic.
- atonse 7y agoThis would amount to potentially "restarting" the app every hour? That would cause potential errors every hour. I think I saw somewhere that it's actually quite easy to do this with OTP. You can just tell the supervisor to kill the children and when they respawn, they'll pick up the new credentials.