Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Where to store secrets? #9

Open
BenjamenMeyer opened this issue May 11, 2020 · 4 comments
Open

Where to store secrets? #9

BenjamenMeyer opened this issue May 11, 2020 · 4 comments
Labels
question Further information is requested

Comments

@BenjamenMeyer
Copy link
Member

LastPass provides the ability to share secrets among users. It has a free level for personal use, but nothing for open source projects.

GitHub can store encrypted secrets and limit them to collaborators; but you can't read the secret easily.

We could store some an ansible-vault in github and protect the encryption key; but that's still not very optimal.

Is anyone aware of a service for open source projects that we can use to share secrets between members?

@BenjamenMeyer BenjamenMeyer added the question Further information is requested label May 11, 2020
@nabaco
Copy link
Member

nabaco commented May 12, 2020

@BenjamenMeyer just to have a general understanding, can you give examples of secrets that you're talking about?

@BenjamenMeyer
Copy link
Member Author

@nabaco usernames and passwords for social medias accounts, master accounts for cloud infrastructure, etc

@nabaco
Copy link
Member

nabaco commented May 12, 2020

Understood.
Generally, I would strive to handle this through personal accounts that have permissions for access.

@BenjamenMeyer
Copy link
Member Author

@nabaco yes and no. There are some accounts that will have a master shared account. We'll lock that and access through personal accounts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants