on secret management - Githubissues

softwaremill / akka-http-session

Web & mobile client-side akka-http sessions, with optional JWT support

https://softwaremill.com/open-source/

Apache License 2.0

440 stars 58 forks source link

Closed nmarasoiu closed 6 years ago

nmarasoiu commented 6 years ago

Hi, I would see two possibilities of managing the secret per env:

via Kubernetes secrets, that is as a specific kind of configuration (secret one)
automatically generating a secret when an environment starts - but where to keep it? Would the database be a proper place? I know for secret data there is Vault for instance, but that would make it too complex for us to choose. What is your advice? Thank you, Nicu

adamw commented 6 years ago

I think that is very project-specific. You might use vault, you might use an AWS/Google service, keep it in database ...

Closing as this isn't really in scope of akka-http-session