4 ms·
When I saw "secret store" I guessed it had to be Vault. Vault's is amazing but it lets you configure things that can blow up on you in X time. For example, issu
by wernerb 5y ago
When I saw "secret store" I guessed it had to be Vault. Vault's is amazing but it lets you configure things that can blow up on you in X time. For example, issuing 50 secrets per second but have every secret expire after a week (or never). It would mean (multiple) goroutine per secret checking status on the lease.
This kind of thing unfortunately, is easy to miss and occur in Vault.
- tentacleuno 5y agoSecret expiration seems like a better thing to do from the application: check the token every time it's used, and if it's past a week mark it as expired. Combine this with caching, etc. Is there an advantage to having such a system in the database?
- wernerb 5y agoWhat you suggest does scale with performance but not with organization its why Vault is used in the first place.