Securely store Lighthouse key in Credstash

department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:

https://depo-platform-documentation.scrollhelp.site/index.html

282 stars 203 forks source link

Securely store Lighthouse key in Credstash #4279

Closed ncksllvn closed 4 years ago

ncksllvn commented 4 years ago

For our Forms API to work, we need to have a secret API key hidden away in our service, Credstash, so that it isn't exposed over the network and potentially hijacked.

ncksllvn commented 4 years ago

Hey @SMLuthi, I think the Vets-API dev environment should be good to go with a Lighthouse API Key. See this PR - https://github.com/department-of-veterans-affairs/devops/pull/6111.

Behold

Karak888 commented 4 years ago

@ncksllvn sounds like this can be closed as validated. Please let me know if you need to reopen for any reason. Thanks!