4 ms·
2. A service restart is always going to be less risky than shipping a new application (which would also require a restart as well). 3. In an ideal world I’d ag
by laumars 6y ago
2. A service restart is always going to be less risky than shipping a new application (which would also require a restart as well).
3. In an ideal world I’d agree with you. However in many places it is and even in places where it’s not, not hardcoding passwords helps provide defence in depth.
4. Harder to do it securely. Your solution leaks all passwords to all environments and is possibly the worst workaround to the problem (I’ve seen CI/CD inject the correct passwords, which seems the best approach but if you’re going to those lengths then you might as well use a secrets management service)