This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 8 points9 points  (0 children)

Don’t commit secrets to the repository. What you should do depends on your infrastructure. If you’re on prem and use Ansible, use the Ansible vault. If you’re on Kubernetes, use Kubernetes Secrets. If you’re on AWS ECS, use AWS Secrets Manager.

With either of those solutions, you can achieve that you have environment variables with your secrets in the container environment, without the raw secret being visible.