Since passwords need to go into these configuration files, how are people securing the passwords to ensure they are not leaked?
s
some-microphone-33485
08/27/2021, 10:39 PM
We are using the passwords in env file and you can send to the yml file as variable . but the next step we will put in secrets manager(aws). If you have something similar it would work too
c
clever-ocean-10572
08/28/2021, 12:55 AM
So you use a keystore to store the password and an env variable to retrieve it which is retrieved by the yml config?
clever-ocean-10572
08/28/2021, 12:55 AM
I was going to try and use pass to do that but not really sure how to get an env variable to retrieve a password 😞