fugue/credstash
View on GitHub ↗ ★ 2,062 Python
A little utility for managing credentials in the cloud
16 mentions on Hacker News by 14 people: 1 story, 15 comments · first 2015-11-04 · latest 2024-09-26
20082026
-
…files (in that order). This offered the best of both worlds for local and remote deployments. [0] https://github.com/fugue/credstash
comment by jumploops · 2024-09-26 · in Ask HN: What tools should I use to manage secrets from env files? -
…There are Hashi-Vault modules for SQL DBs but not for Mailgun or CloudFlare for example. [^3]: https://github.com/fugue/credstash
comment by atmosx · 2023-03-07 · in Ask HN: Secure and simple way for secret/credential management in a startup? -
…But AWS Secrets Manager, by itself, doesn't really present a good reason-for-being to me. [0] - https://github.com/fugue/credstash [1] - https://github.com/codahale/sneaker
comment by eropple · 2018-07-07 · in How to manage any kind of secret with AWS Secrets Manager -
https://github.com/fugue/credstash https://aws.amazon.com/secrets-manager/
comment by imauld · 2018-04-20 · in Ask HN: Tools for Managing Secret in Production Scale? -
…and deal with them rather than hiding them behind locked dependencies you simply never upgrade. [1] https://github.com/fugue/credstash/pull/174
comment by avitzurel · 2017-11-07 · in How we keep dependencies fresh across 45+ microservices -
…provisions its own secrets), but you could provide access with a bog-standard token machine. [1] https://github.com/fugue/credstash [2] https://github.com/codahale/sneaker [3] https://github.com/eropple/auster
comment by eropple · 2017-05-09 · in Travis CI Security Advisory: Secured Environment Variables -
…API Gateway with Zappa [3]. Lambda isn't for every use case, but for those it is, I'm bullish. [1] https://github.com/fugue/credstash [2] https://topics.arlingtonva.us/2016/11/voter-registration-sea... [3] https://www.zappa.io/
comment by dbarlett · 2016-11-20 · in New for AWS Lambda – Environment Variables and Serverless Application Model -
…- Blackbox: https://github.com/StackExchange/blackbox - CredStash: https://github.com/fugue/credstash - Lyft Confydant: https://github.com/lyft/confidant - Trousseau: https://github.com/oleiade/trousseau - Sneaker: https://gi
comment by josegonzalez · 2016-10-28 · in Secret Management with Vault -
I prefer credstash ( https://github.com/fugue/credstash ) which uses KMS and stores encrypted values in dynamodb. It has built in ansible support via lookups too!
comment by carrja99 · 2016-07-18 · in Biscuit: a multi-region key value store for your AWS infrastructure secrets -
Use kms and dynamodb with key enveloping, or this tool: https://github.com/fugue/credstash Don't initialize into env vars and don't store in repos, even private ones.
comment by Ixiaus · 2016-07-09 · in Our nightmare on Amazon ECS -
Probably want to use a secret management tool and just not initialize into environment variables... https://github.com/fugue/credstash
comment by Ixiaus · 2016-07-09 · in Our nightmare on Amazon ECS -
…values while you keep the name of the secret and (possibly) version in a repo with your code. [0] https://github.com/fugue/credstash
comment by Aoreias · 2016-05-09 · in Git-secret – store private data in a Git repo -
…able to decrypt with the master key and I restrict what ciphertext they can read from Dynamodb. [0] https://github.com/fugue/credstash
comment by jfroma · 2016-05-09 · in Git-secret – store private data in a Git repo -
Another alternative developed for AWS deployments, written in Python and uses KMS: Credstash https://github.com/fugue/credstash
comment by AndrewWright · 2015-11-04 · in Confidant: an open-source secret management service -
…it's not a reinvention of sneaker. That said, sneaker is very similar in design, as is credstash: https://github.com/fugue/credstash Both of those are really great projects and I recommend them if they fit your use-case. One of the reasons…
comment by ryan_lane · 2015-11-04 · in Confidant: an open-source secret management service