For a production Kubernetes environment, what secret-management pattern are you using? The main options I'm considering are native Kubernetes Secrets, a Secrets Store CSI Driver, or having applications…
When I first built a deployment pipeline, I stored database passwords and API keys in the platform's encrypted secrets store and assumed that was sufficient. I've since realized…
Our platform team is designing secrets management for several applications in the same delivery group. We could manage one Key Vault per environment, or create separate vaults for…
I'm writing a script that runs on a jump server and connects to a vCenter server. Right now, the credentials are stored directly in the script as plain…
We run an internal self-service platform API, and people need to access it from CLI tools and scripts. Right now, we create a static token, display it once…
I've been trying to figure out the most secure way to handle credentials used by PowerShell scripts. I understand that the ideal solution is usually a dedicated secrets-management…
I need to make my host user's `~/.git-credentials` available inside a container so a program can use Git authentication. The file is owned by my host user and…
I'm curious how other developers manage API keys, access tokens, passwords, and similar secrets for personal projects and web applications. I've mostly used a plain text note so…
I'm used to managing secrets in AWS where I can simply attach an instance profile to securely retrieve secrets from Secrets Manager or SSM Parameter Store. However, now…