I'm a huge fan of GitHub actions and organization level secrets, but you can't see what the current secret is w/i GitHub (w/o deploying a container somewhere with it exported as an ENV var). I tried to keep a copy in my former secret management tool clipperz.is/app but drift is real. It was always too … Continue reading Managing Github Secrets with Vault
Tag: automated infrastructure
Secure GitHub Deployments to Your Home
I'm a cheap bastard when it comes to online services. All my repositories have been publicly hosted on GitHub well before Microsoft swooped in and offered unlimited private repos. Since around 2016, this had been my build/deploy pipeline: You might ask how could that ssh key be comprised. Well, back in the day, CircleCI would … Continue reading Secure GitHub Deployments to Your Home
Test Driven Chef Cookbooks With Meez
When cooking a new dish, things get out of control if you try to manage too many things at once You might face a similar situation when trying to write a new Chef cookbook. Getting your arms around all those tools and frameworks needed to write solid, tested cookbooks gets you spinning. You need to … Continue reading Test Driven Chef Cookbooks With Meez
DevOps is NOT a Job Description
The DevOps hype produces some strange effects. Not only do tool vendors try to jump on the DevOps band wagon by declaring their products "DevOps inside" or listing DevOps as a feature, but companies start to look for a "DevOp" in their job ads. Don't be misled! Here's what DevOps is really about: DevOps Is … Continue reading DevOps is NOT a Job Description
Sprinkle – Automated Infrastructure for the Rest of us
Automatically setting up and maintaining my servers is a must for me. Only if everything I install and configure on a server is scripted I'm sure I know what's there and that it stays that way. Having automated infrastructure enables me to schedule a critical setup change at 3 am and be on the safe … Continue reading Sprinkle – Automated Infrastructure for the Rest of us