How do you retrieve secrets from your application?

85 views
Skip to first unread message

CameronGo

unread,
Aug 30, 2016, 1:59:04 PM8/30/16
to confidant-users
I've been rolling through the published documentation and I hope I haven't stupidly missed something, but I don't actually see anywhere that discusses how to retrieve secrets once they are stored on the service.  I have an instance running in my test env and have created a couple of services and creds.  I just don't know how or by what mechanism I am to use to retrieve them at run-time.

Ryan Lane

unread,
Aug 30, 2016, 2:24:42 PM8/30/16
to CameronGo, confidant-users
Hey Cameron,

In Confidant version 1.1 we include an opinionated client, that can be installed via pip (confidant-client). This has a CLI and also a python library that can be included directly into your code. We call the client, output the service's secrets into a file on a ramdisk, and have the applications import that. We put this into a cron and detect changes to the secrets. If the secrets change we restart our services.

We're doing a version 1.1 release today, so we'll have docs available on how to use the client.

- Ryan

On Tue, Aug 30, 2016 at 10:59 AM, CameronGo <livedr...@gmail.com> wrote:
I've been rolling through the published documentation and I hope I haven't stupidly missed something, but I don't actually see anywhere that discusses how to retrieve secrets once they are stored on the service.  I have an instance running in my test env and have created a couple of services and creds.  I just don't know how or by what mechanism I am to use to retrieve them at run-time.

--
You received this message because you are subscribed to the Google Groups "confidant-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confidant-users+unsubscribe@googlegroups.com.
To post to this group, send email to confidant-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/confidant-users/c442ca49-1949-4af8-b329-cd0d2c2ca4cc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

CameronGo

unread,
Aug 30, 2016, 3:18:46 PM8/30/16
to confidant-users, livedr...@gmail.com
OK - great, I'll look for that info on the client.  Thanks!


On Tuesday, August 30, 2016 at 2:24:42 PM UTC-4, Ryan Lane wrote:
Hey Cameron,

In Confidant version 1.1 we include an opinionated client, that can be installed via pip (confidant-client). This has a CLI and also a python library that can be included directly into your code. We call the client, output the service's secrets into a file on a ramdisk, and have the applications import that. We put this into a cron and detect changes to the secrets. If the secrets change we restart our services.

We're doing a version 1.1 release today, so we'll have docs available on how to use the client.

- Ryan
On Tue, Aug 30, 2016 at 10:59 AM, CameronGo <livedr...@gmail.com> wrote:
I've been rolling through the published documentation and I hope I haven't stupidly missed something, but I don't actually see anywhere that discusses how to retrieve secrets once they are stored on the service.  I have an instance running in my test env and have created a couple of services and creds.  I just don't know how or by what mechanism I am to use to retrieve them at run-time.

--
You received this message because you are subscribed to the Google Groups "confidant-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confidant-use...@googlegroups.com.
To post to this group, send email to confida...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages