Questions tagged [secret-management]
The secret-management tag has no usage guidance.
21
questions
0
votes
0
answers
39
views
Secrets Scanning for Atlassian Bitbucket
I am looking for:
A plugin on Atlassian Bitbucket which would help us run scan on entire code to detect any hardcoded secrets
A tool/script which could be run in a pipeline right after the code is ...
- 255
2
votes
1
answer
307
views
Is it possible to create a tls kubernetes secret using Azure Key Vault data resources in Terraform?
I have a certificate file and a private key file that I am using to implement tls encrypted traffic for several different k8s pods running under an NGINX ingress load balancer. This works fine (i.e. ...
- 31
0
votes
0
answers
116
views
CICD AWS Secrets Manager - How to determine which secrets to inject?
I am working on implementing "secrets injection" on a GitLab CI pipeline. The secrets are stored on AWS Secrets Manager.
The goal is to create a appsettings.json file containing the secrets ...
- 171
1
vote
1
answer
553
views
How to fetch azure secret if exist in KV using terraform
I am using below terraform code for fetch azure secret and this is working fine when secret is exist in the azure KV.
Getting error when secret is not available in KV.
data "...
- 255
0
votes
1
answer
152
views
How can I retrieve a lost login token for KubeApps?
How can I retrieve the root token from a KubeApps deployment?
- 1,524
0
votes
0
answers
26
views
Is there a generally accepted method/workflow for storing open source project secrets for production environments?
Pretty my much the title, but some caveats:
My project is a simple Laravel app hosted on a spare laptop on my own network (Nginx on Ubuntu).
The repo is public, but doesn't yet have any sensitive ...
- 101
0
votes
0
answers
902
views
fetch all secrets from vault using external secrets operator
I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm.
I've authenticated externalsecrets to vault using the ...
- 101
1
vote
0
answers
82
views
Access AWS Secret inside docker file
I have a docker file running on AWS that looks like the following:
FROM ubuntu:latest
RUN apt-get update
RUN apt-get install -y python3
RUN apt-get install -y git
RUN git init
RUN git clone https://&...
- 111
3
votes
2
answers
1k
views
How to manage Env Variables / Configs on a Helm Chart + Github Actions + Github Secrets
I have a Rest API in Python that has several Configuration variables that are setup at startup time.
This variables are read from the environment variables of the host machine.
Our production ...
1
vote
0
answers
13
views
Tooling to allow server apps to checkout passwords (database, email provider, etc) on multiple servers?
I'm looking for suggestions on the right kind of tools I can use to improve the security and ease of use for managing passwords for my multi-server apps.
I have a couple of ubuntu-based servers ...
- 111
1
vote
1
answer
303
views
How can I pass a secret from a Salt Master to a Minion without using a Pillar?
I am looking to understand how I can reduce duplication of secrets. For example SSL Certificates. I want to have the Salt Master pull the Certificate from a Secure Source (Azure Key Vault) and then '...
- 636
0
votes
1
answer
85
views
How to deploy static website from public repo via Github Actions to private web server
I like to start an open-source project via Github where topics (markdown pages) can be created from the community. Via PR the changes get merged to the main repo and then it triggers a Github Action ...
- 11
4
votes
2
answers
7k
views
Secrets in Docker without Swarm
I am using Docker, but not Swarm (or any other orchestration) for a project.
Is there a way to leverage Docker Secrets without Swarm?
- 41
2
votes
1
answer
74
views
How to protect secrets whilst enabling the ability to amend a pipeline
I'm writing a CI pipeline using GitHub Actions.
The pipeline will build a Docker image, which it will then push to our Docker repository (AWS ECR).
In order to talk to ECR, we'll need to provide a ...
- 305
12
votes
1
answer
4k
views
Should AWS arn values be treated as secrets?
I have a configuration file that contains AWS resource ARNs stored in a git repo. This includes some ARNs of AWS IAM role resources. Should these be treated as if they are a secret value, and not ...
- 3,198
2
votes
2
answers
84
views
Terraform's local state (the 2 tfstate files) contain very sensitive info
Part of my IaC that describes my systems for Azure is CosmosDB, and Keyvaults. Terraform happily created everything and I was able to use an output from CosmosDB (db keys) as an input to the Keyvault ...
- 163
2
votes
1
answer
136
views
Recommended Design - Communication among Jenkins + Vault + App
Design A: CD tool communicate with Vault to fetch App secrets on its behalf
Jenkins ( CD tool ) computes the Vault path according to the app/project & according to which environment the app will ...
- 271
1
vote
1
answer
78
views
How to manage Hashicorp Vault patching in AWS?
I'm setting up a Hashicorp Vault open source deployment in AWS, but I'm trying to figure out the best approach for keeping the underlying EC2 instances patched. I'm using AWS Systems Manager for ...
- 111
1
vote
2
answers
504
views
How to handle different credentials in continuous integration?
I am using teamcity to automatically build and test a nodejs application. The problem I am facing is that the application needs to have some environment variables set during the build phase, as well ...
- 111
5
votes
1
answer
553
views
Jenkins: make a credential available to all users
I'd like to allow all of our organization's users to create new pipelines in Jenkins, via Blue Ocean...
This requires a Github access token, meaning I have to either require each user to use their ...
- 151
48
votes
2
answers
48k
views
Passing secrets to a Docker container
I have a base docker image which is used to run image analysis software. For each container created from the image, there are a set of configuration settings, some of which are secrets (encryption ...
- 3,198