Questions tagged [secret-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
22 views

How can I retrieve a lost login token for KubeApps?

How can I retrieve the root token from a KubeApps deployment?
user avatar
0 votes
0 answers
22 views

Is there a generally accepted method/workflow for storing open source project secrets for production environments?

Pretty my much the title, but some caveats: My project is a simple Laravel app hosted on a spare laptop on my own network (Nginx on Ubuntu). The repo is public, but doesn't yet have any sensitive ...
user avatar
0 votes
0 answers
81 views

fetch all secrets from vault using external secrets operator

I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm. I've authenticated externalsecrets to vault using the ...
user avatar
  • 1
0 votes
0 answers
25 views

issues with creating tsl secret from external cert imported to kevault for AKS ingress with nginx

Im having issues with creating tsl secret from external cert imported to key vault for AKS ingress nginx this is secret config apiVersion: secrets-store.csi.x-k8s.io/v1 kind: SecretProviderClass ...
user avatar
1 vote
0 answers
23 views

Access AWS Secret inside docker file

I have a docker file running on AWS that looks like the following: FROM ubuntu:latest RUN apt-get update RUN apt-get install -y python3 RUN apt-get install -y git RUN git init RUN git clone https://&...
user avatar
  • 11
1 vote
2 answers
149 views

How to manage Env Variables / Configs on a Helm Chart + Github Actions + Github Secrets

I have a Rest API in Python that has several Configuration variables that are setup at startup time. This variables are read from the environment variables of the host machine. Our production ...
user avatar
1 vote
0 answers
13 views

Tooling to allow server apps to checkout passwords (database, email provider, etc) on multiple servers?

I'm looking for suggestions on the right kind of tools I can use to improve the security and ease of use for managing passwords for my multi-server apps. I have a couple of ubuntu-based servers ...
user avatar
  • 111
0 votes
0 answers
16 views

Possibility to get rig of docker swarm

We use docker swarm only because of storing secrets purpose. I am investigating if we can either use another approach, docker-compose, for example and get rid of docker swarm or it is easier and ...
user avatar
  • 1
0 votes
0 answers
11 views

Is it best practice to check SealedSecrets into Git?

Recently a firm hired to handle our Kubernetes application operator extensively used SealedSecret(s) to store sensitive Secrets then checked the encrypted string into git. This seemed like a security ...
user avatar
  • 131
0 votes
0 answers
22 views

How can I pass a secret from a Salt Master to a Minion without using a Pillar?

I am looking to understand how I can reduce duplication of secrets. For example SSL Certificates. I want to have the Salt Master pull the Certificate from a Secure Source (Azure Key Vault) and then '...
user avatar
0 votes
0 answers
14 views

Secrets management for on-prem non-containerized Windows applications

We have a several-years-old set of applications, running on a few thousand servers. These are Windows machines, non-containerized, mostly on-prem but we do run some stuff in the major cloud providers ...
user avatar
  • 101
0 votes
1 answer
39 views

How to deploy static website from public repo via Github Actions to private web server

I like to start an open-source project via Github where topics (markdown pages) can be created from the community. Via PR the changes get merged to the main repo and then it triggers a Github Action ...
user avatar
3 votes
2 answers
4k views

Secrets in Docker without Swarm

I am using Docker, but not Swarm (or any other orchestration) for a project. Is there a way to leverage Docker Secrets without Swarm?
user avatar
  • 31
2 votes
1 answer
61 views

How to protect secrets whilst enabling the ability to amend a pipeline

I'm writing a CI pipeline using GitHub Actions. The pipeline will build a Docker image, which it will then push to our Docker repository (AWS ECR). In order to talk to ECR, we'll need to provide a ...
user avatar
9 votes
1 answer
1k views

Should AWS arn values be treated as secrets?

I have a configuration file that contains AWS resource ARNs stored in a git repo. This includes some ARNs of AWS IAM role resources. Should these be treated as if they are a secret value, and not ...
user avatar
  • 2,993
2 votes
2 answers
61 views

Terraform's local state (the 2 tfstate files) contain very sensitive info

Part of my IaC that describes my systems for Azure is CosmosDB, and Keyvaults. Terraform happily created everything and I was able to use an output from CosmosDB (db keys) as an input to the Keyvault ...
user avatar
2 votes
1 answer
106 views

Recommended Design - Communication among Jenkins + Vault + App

Design A: CD tool communicate with Vault to fetch App secrets on its behalf Jenkins ( CD tool ) computes the Vault path according to the app/project & according to which environment the app will ...
user avatar
1 vote
1 answer
68 views

How to manage Hashicorp Vault patching in AWS?

I'm setting up a Hashicorp Vault open source deployment in AWS, but I'm trying to figure out the best approach for keeping the underlying EC2 instances patched. I'm using AWS Systems Manager for ...
user avatar
  • 111
1 vote
2 answers
309 views

How to handle different credentials in continuous integration?

I am using teamcity to automatically build and test a nodejs application. The problem I am facing is that the application needs to have some environment variables set during the build phase, as well ...
user avatar
5 votes
1 answer
521 views

Jenkins: make a credential available to all users

I'd like to allow all of our organization's users to create new pipelines in Jenkins, via Blue Ocean... This requires a Github access token, meaning I have to either require each user to use their ...
user avatar
  • 151
42 votes
2 answers
39k views

Passing secrets to a Docker container

I have a base docker image which is used to run image analysis software. For each container created from the image, there are a set of configuration settings, some of which are secrets (encryption ...
user avatar
  • 2,993