We changed our privacy policy. Read more.

Questions tagged [secret-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

Secrets management for on-prem non-containerized Windows applications

We have a several-years-old set of applications, running on a few thousand servers. These are Windows machines, non-containerized, mostly on-prem but we do run some stuff in the major cloud providers ...
0
votes
1answer
31 views

How to deploy static website from public repo via Github Actions to private web server

I like to start an open-source project via Github where topics (markdown pages) can be created from the community. Via PR the changes get merged to the main repo and then it triggers a Github Action ...
0
votes
1answer
2k views

Secrets in Docker without Swarm

I am using Docker, but not Swarm (or any other orchestration) for a project. Is there a way to leverage Docker Secrets without Swarm?
1
vote
1answer
53 views

How to protect secrets whilst enabling the ability to amend a pipeline

I'm writing a CI pipeline using GitHub Actions. The pipeline will build a Docker image, which it will then push to our Docker repository (AWS ECR). In order to talk to ECR, we'll need to provide a ...
7
votes
1answer
385 views

Should AWS arn values be treated as secrets?

I have a configuration file that contains AWS resource arn's stored in a Github repo. This includes some arn's of AWS IAM role resources. Should these be treated as if they are a secret value, and not ...
2
votes
2answers
47 views

Terraform's local state (the 2 tfstate files) contain very sensitive info

Part of my IaC that describes my systems for Azure is CosmosDB, and Keyvaults. Terraform happily created everything and I was able to use an output from CosmosDB (db keys) as an input to the Keyvault ...
2
votes
1answer
101 views

Recommended Design - Communication among Jenkins + Vault + App

Design A: CD tool communicate with Vault to fetch App secrets on its behalf Jenkins ( CD tool ) computes the Vault path according to the app/project & according to which environment the app will ...
1
vote
1answer
59 views

How to manage Hashicorp Vault patching in AWS?

I'm setting up a Hashicorp Vault open source deployment in AWS, but I'm trying to figure out the best approach for keeping the underlying EC2 instances patched. I'm using AWS Systems Manager for ...
1
vote
2answers
221 views

How to handle different credentials in continuous integration?

I am using teamcity to automatically build and test a nodejs application. The problem I am facing is that the application needs to have some environment variables set during the build phase, as well ...
5
votes
1answer
483 views

Jenkins: make a credential available to all users

I'd like to allow all of our organization's users to create new pipelines in Jenkins, via Blue Ocean... This requires a Github access token, meaning I have to either require each user to use their ...
37
votes
2answers
32k views

Passing secrets to a Docker container

I have a base docker image which is used to run image analysis software. For each container created from the image, there are a set of configuration settings, some of which are secrets (encryption ...