Hacker GitHub

← All repos

fugue/credstash

View on GitHub ↗ ★ 2,062 Python

A little utility for managing credentials in the cloud

16 mentions on Hacker News by 14 people: 1 story, 15 comments · first 2015-11-04 · latest 2024-09-26

Mentions per year 16 mentions · busiest year 2016 (7)
20082026
AllStoriesComments NewestTopOldest
  1. …files (in that order). This offered the best of both worlds for local and remote deployments. [0] https://github.com/fugue/credstash
    comment by jumploops · 2024-09-26 · in Ask HN: What tools should I use to manage secrets from env files?
  2. …There are Hashi-Vault modules for SQL DBs but not for Mailgun or CloudFlare for example. [^3]: https://github.com/fugue/credstash
    comment by atmosx · 2023-03-07 · in Ask HN: Secure and simple way for secret/credential management in a startup?
  3. …But AWS Secrets Manager, by itself, doesn't really present a good reason-for-being to me. [0] - https://github.com/fugue/credstash [1] - https://github.com/codahale/sneaker
    comment by eropple · 2018-07-07 · in How to manage any kind of secret with AWS Secrets Manager
  4. https://github.com/fugue/credstash https://aws.amazon.com/secrets-manager/
    comment by imauld · 2018-04-20 · in Ask HN: Tools for Managing Secret in Production Scale?
  5. …and deal with them rather than hiding them behind locked dependencies you simply never upgrade. [1] https://github.com/fugue/credstash/pull/174
    comment by avitzurel · 2017-11-07 · in How we keep dependencies fresh across 45+ microservices
  6. …provisions its own secrets), but you could provide access with a bog-standard token machine. [1] https://github.com/fugue/credstash [2] https://github.com/codahale/sneaker [3] https://github.com/eropple/auster
    comment by eropple · 2017-05-09 · in Travis CI Security Advisory: Secured Environment Variables
  7. ▲ 1
    Credstash – A little utility for managing credentials in the cloud
    story by spaceboy · 2017-02-16 · 0 comments
  8. …API Gateway with Zappa [3]. Lambda isn't for every use case, but for those it is, I'm bullish. [1] https://github.com/fugue/credstash [2] https://topics.arlingtonva.us/2016/11/voter-registration-sea... [3] https://www.zappa.io/
    comment by dbarlett · 2016-11-20 · in New for AWS Lambda – Environment Variables and Serverless Application Model
  9. …- Blackbox: https://github.com/StackExchange/blackbox - CredStash: https://github.com/fugue/credstash - Lyft Confydant: https://github.com/lyft/confidant - Trousseau: https://github.com/oleiade/trousseau - Sneaker: https://gi
    comment by josegonzalez · 2016-10-28 · in Secret Management with Vault
  10. I prefer credstash ( https://github.com/fugue/credstash ) which uses KMS and stores encrypted values in dynamodb. It has built in ansible support via lookups too!
    comment by carrja99 · 2016-07-18 · in Biscuit: a multi-region key value store for your AWS infrastructure secrets
  11. Use kms and dynamodb with key enveloping, or this tool: https://github.com/fugue/credstash Don't initialize into env vars and don't store in repos, even private ones.
    comment by Ixiaus · 2016-07-09 · in Our nightmare on Amazon ECS
  12. Probably want to use a secret management tool and just not initialize into environment variables... https://github.com/fugue/credstash
    comment by Ixiaus · 2016-07-09 · in Our nightmare on Amazon ECS
  13. …values while you keep the name of the secret and (possibly) version in a repo with your code. [0] https://github.com/fugue/credstash
    comment by Aoreias · 2016-05-09 · in Git-secret – store private data in a Git repo
  14. …able to decrypt with the master key and I restrict what ciphertext they can read from Dynamodb. [0] https://github.com/fugue/credstash
    comment by jfroma · 2016-05-09 · in Git-secret – store private data in a Git repo
  15. Another alternative developed for AWS deployments, written in Python and uses KMS: Credstash https://github.com/fugue/credstash
    comment by AndrewWright · 2015-11-04 · in Confidant: an open-source secret management service
  16. …it's not a reinvention of sneaker. That said, sneaker is very similar in design, as is credstash: https://github.com/fugue/credstash Both of those are really great projects and I recommend them if they fit your use-case. One of the reasons…
    comment by ryan_lane · 2015-11-04 · in Confidant: an open-source secret management service