As we saw in the previous article, it is difficult to authenticate a pipeline or even a Gitlab-CI job to allow secure access to our secrets in least privilege mode. HashiCorp Vault allows us to address this need in a uniform and cloud agnostic way. Let's look at our workflow again, this time adding Vault : Initially, Vault allo...
Lire la suiteDid you know about the largest database account leaked ? More than 12 millions account credentials have been leaked. And beside that, in our traditional CI/CD platforms, we store credentials for cloud deployments (access key/secret key, service account, login/password) somewhere to be in the end available as an environment variable. B...
Lire la suite