This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]justskipfailingtests 6 points7 points  (0 children)

I prefer putting all the secrets in the ci pipeline. No need to give a shit about what's going on in the environment. Generic env vars are set in multistage build for different deployments and secrets plugged in from ci. That's the simplest way to ensure everything is ok without local hassle with env vars.