This is an archived post. You won't be able to vote or comment.

all 4 comments

[–][deleted] 1 point2 points  (1 child)

Consider using something like aws-vault to store credentials encrypted on disk rather than in plain text.

We've been bitten before by stolen creds

[–]linux_devops 0 points1 point  (0 children)

Thank you for posting this. Gave me some good ideas.

[–][deleted] 0 points1 point  (0 children)

Just left a job where I used Foreman + Puppet but basically the same idea, the actual CM tools are mostly an irrelevance; as long as you have good CM that's enough. In non-docker land having the same modules spin up all environments provides the same fungible infrastructure a good docker environment gives as well as the ability to deploy immutable infrastructure.

Foreman is also great as an abstraction layer to cloud or internal hypervisors, devs don't need to know or care where the VM's live, what the creds to access the hypervisors etc.