4

I have been struggling with managing and keeping track of config secrets and keys. I know that keeping secrets in code is bad karma, but managing them with environment variables becomes cumbersome with multiple microservices running on multiple servers. To worsen this, add humans and access levels.

Whenever I Google, I feel like I am the only one who has this problem. Do you guys sometimes feel like this?

If you have any solutions, hacks or services that you use, please recommend.

Comments
  • 1
  • 1
    Use a deploy solution that can set variables and keep the config in the deploy pipeline. Like octopus deploy.

    You can have a develop setup that are then replaced on deploy.
  • 0
    @JoshBent Thanks for recommending. I checked out Vault Project, seems directed towards enterprises. Do you have any recommendations that is helpful for small and medium teams? Appreciate your help.
  • 0
    @thandaanda just because something is marketed towards enterprise, doesn't mean you can't use it, it is pretty much the standard for maintaining secrets and has the most library/framework support.
Add Comment