On: Managing Secrets in Docker Compose – A Developer's Guide

[TZubiri]

As soon as you automate it it stops being secure.

Manually log in and input or transfer the secrets.

Done.

"But I need new servers to be spun up automatically.."

No you don't. No you don't.

[skeeter2020 → TZubiri]

We have 3500 installs; you think having a human manage all those secrets manually is best practice?

[TZubiri → skeeter2020]

Is doing something 3500 times ridiculous? Or is it standard issue work?

By the by, the frequency of this is once per server, so it's not like you have to do it daily.

[DiggyJohnson → TZubiri]

Okay…what if you do need multiple instances for one a million reasons?

[TZubiri → DiggyJohnson]

Transfer your secrets manually multiple times