Where Do Secrets Go?

  • Environment Variables may not be great for secrets. Where do they come from?
  • Automated infrastructure is nice but security is a problem to solve
  • Hard-coding passwords / keys into version-controlled code is a bad idea
  • Credentials files are not checked in. But how do you get the file on machines?
  • There are a few clever approaches to solving this. But do we need passwords?

4 / 22