3 ms·
Do you check in passwords into your version control? How do you differentiate between different deployment settings?
by makach 6y ago
Do you check in passwords into your version control? How do you differentiate between different deployment settings?
- crispyporkbites 6y agoSecrets should be in env vars or secret storage like hashicorps vault You set those on deployment so your engineering team never see production secrets
- lukerohde 6y agosops is a great tool for version-controlled secrets - plaintext keys and encrypted values using remote KMS to do the encryption. https://github.com/mozilla/sops https://github.com/mozilla/sops