ECS and Vault: Shhhhh I have a secret

https://www.kickstarter.com/backing-and-hacking/ecs-and-vault-shhhhh-i-have-a-secret

by kiyanwang • 10 years ago

30 5 10 years ago

nodesocket• 10 years ago

Any idea if Kickstarter looked at secret store alternatives such as Square Keywhiz[1] or Sneaker[2]?

  [1] https://square.github.io/keywhiz/
  [2] https://github.com/codahale/sneaker

ktheory• 10 years ago

(Kickstarter staff here.)

We did. Those are great projects.

Personally, I see Vault having a lot of community momentum behind it; and it can easily solve some complicated security infrastructure beyond storing secrets (the PKI, MySQL & ssh secret backends are particularly compelling).

flurdy• 10 years ago

I did not realise this was a tech blog by kickstarter themselves. I kept looking for where do I back this project. I thought maybe this was a new "back a howto or integration example" feature... Its early, my brain is not yet awake.

koolba• 10 years ago

This will break badly if you have whitespace in your environment variable names or values:

    export $(envconsul -once -config="/envconsul-config.hcl" env | xargs)

What they really should do is add an "--as-exports" option that outputs lines of properly escaped "export FOO=<value>" lines. That output could then be processed in a script via:

    envconsul --as-exports | source /dev/stdin

otterley• 10 years ago

How are you garbage collecting the S3 objects?

ECS and Vault: Shhhhh I have a secret

Related Stories