Simple Dynamic Secrets Sharing #104

New issue

Closed

opened 2024-07-10 03:31:45 +03:00 by max · 1 comment

max commented

2024-07-10 03:31:45 +03:00

Owner

Basic workflow:

A provider service has a secret key and wants a consumer service to use it
The provider service encrypts the secret key with age (SSH host key of the consumer) and puts the age-encrypted file into Consul KV
The consumer service waits for the encrypted file to appear in Consul KV, downloads and decrypts it
The consumer service can now use the secret key to talk to the provider service

Basic workflow: - A provider service has a secret key and wants a consumer service to use it - The provider service encrypts the secret key with age (SSH host key of the consumer) and puts the age-encrypted file into Consul KV - The consumer service waits for the encrypted file to appear in Consul KV, downloads and decrypts it - The consumer service can now use the secret key to talk to the provider service