Questions tagged [secret-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Secrets in Docker without Swarm

I am using Docker, but not Swarm (or any other orchestration) for a project. Is there a way to leverage Docker Secrets without Swarm?
1
vote
1answer
32 views

How to protect secrets whilst enabling the ability to amend a pipeline

I'm writing a CI pipeline using GitHub Actions. The pipeline will build a Docker image, which it will then push to our Docker repository (AWS ECR). In order to talk to ECR, we'll need to provide a ...
5
votes
1answer
46 views

Should AWS arn values be treated as secrets?

I have a configuration file that contains AWS resource arn's stored in a Github repo. This includes some arn's of AWS IAM role resources. Should these be treated as if they are a secret value, and not ...
2
votes
2answers
31 views

Terraform's local state (the 2 tfstate files) contain very sensitive info

Part of my IaC that describes my systems for Azure is CosmosDB, and Keyvaults. Terraform happily created everything and I was able to use an output from CosmosDB (db keys) as an input to the Keyvault ...
0
votes
0answers
13 views

How to grant the currently authenticated AzureAD Service Principal to a newly created Azure Key Vault?

When creating an Azure KeyVault instance in a subscription, we want to create an azurerm_key_vault_access_policy that grants the Service Principal that Terraform is authenticating as Set and Delete ...
0
votes
0answers
18 views

How can I verify my Kubernetes Secret has been updated to the new value?

I am working to update the TLS Certificates across numerous deployments that I inherited. Each deployment consumes a series of shared secrets, including TLS Certificates. I have SSL/TLS Certs ...
2
votes
1answer
74 views

Recommended Design - Communication among Jenkins + Vault + App

Design A: CD tool communicate with Vault to fetch App secrets on its behalf Jenkins ( CD tool ) computes the Vault path according to the app/project & according to which environment the app will ...
1
vote
1answer
35 views

How to manage Hashicorp Vault patching in AWS?

I'm setting up a Hashicorp Vault open source deployment in AWS, but I'm trying to figure out the best approach for keeping the underlying EC2 instances patched. I'm using AWS Systems Manager for ...
1
vote
2answers
64 views

How to handle different credentials in continuous integration?

I am using teamcity to automatically build and test a nodejs application. The problem I am facing is that the application needs to have some environment variables set during the build phase, as well ...
5
votes
1answer
306 views

Jenkins: make a credential available to all users

I'd like to allow all of our organization's users to create new pipelines in Jenkins, via Blue Ocean... This requires a Github access token, meaning I have to either require each user to use their ...
31
votes
2answers
19k views

Passing secrets to a Docker container

I have a base docker image which is used to run image analysis software. For each container created from the image, there are a set of configuration settings, some of which are secrets (encryption ...