4 ms·
They didn't even mention the alternative to this statement. I've only ran applications with environment variables. And since they're allowed everywhere (lambdas
by haloboy777 4y ago
They didn't even mention the alternative to this statement.
I've only ran applications with environment variables. And since they're allowed everywhere (lambdas, docker images, heroku and whatnot), It's hard to imagine how passing credentials into code, could've been done otherwise.
- auspex 4y agoThe two other ways I’ve seen is a direct dependency on the secrets manager or injecting files. Environment variables seem to be the standard. Direct dependency is usually bad and injecting files violates the immutable nature of a container.
- XorNot 4y agoI wouldn't consider binding files to be a violation of container immutability, which is how K8S secrets work.