I got three questions about secrets management:

1)When your micro service in production needs a secret, where is the secret stored and retrieved from?

2)How do you change a secret that half of your production applications use right now?

3)How do you know which secrets and credentials of your production services were used, and by whom/what?

A secret can be API keys , database credentials , environment variables etc...

Thanks in advance.

closed as too broad by 030, Pierre.Vriens, Dan Cornilescu, Tensibai Mar 19 '18 at 8:03

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    Please split your question in 3 separate questions. – Pierre.Vriens Mar 18 '18 at 8:02
  • Thank you @Pierre.Vriens, since I can post every 40 minutes, I will start splitting the questions as requested into 3 separated questions. Already created the first one, you may see it here: devops.stackexchange.com/questions/3659/… – Zvika Nadav Mar 18 '18 at 9:16
  • Merci for taking my advice Zvika. FYI: by splitting it into 3, you'll be able to pick, for each individual question, the answer that fits best for you, for each of those questions individually. As compared to putting 3 questions in a single question: if you'd get 1 answer for each of those 3 questions, you can only mark 1 answer as accepted. Get it? – Pierre.Vriens Mar 18 '18 at 9:27
  • @Pierre.Vriens Roger that, thank you for your advise which makes sense. – Zvika Nadav Mar 18 '18 at 9:31
  • Even in 3 that's utterly broad, secret management is an awfully vast subject and we can't give an advice out of thin air, what do your with, do you have some Config automation in place, etc... – Tensibai Mar 18 '18 at 16:34