Secret Management: The Soft Way
Secrets. Security best-practices mandate that they stay away from the code—or else! And that’s what we did for a long time.
But as CI/CD practices evolved, for a myriad of reasons, we now want to ship the code, the environment, and the secrets, all in one lump. So we can’t hide the secrets anymore… unless?
Tools like HashiCorp Vault attempt to address this by managing secrets outside the delivery chain. Great!