From 92ff89c429fcf19977d1b98ab115940fe82c1853 Mon Sep 17 00:00:00 2001 From: oleksiidn Date: Fri, 2 Jun 2023 12:15:59 +0300 Subject: [PATCH] Secret management part --- docs/SUMMARY.md | 4 ++++ docs/technologies.md | 13 +++++++++++++ 2 files changed, 17 insertions(+) create mode 100644 docs/SUMMARY.md create mode 100644 docs/technologies.md diff --git a/docs/SUMMARY.md b/docs/SUMMARY.md new file mode 100644 index 0000000..7897c98 --- /dev/null +++ b/docs/SUMMARY.md @@ -0,0 +1,4 @@ +# Table of contents + +* [Sandbox](README.md) +* [Technology stack](technologies.md) diff --git a/docs/technologies.md b/docs/technologies.md new file mode 100644 index 0000000..2571c6d --- /dev/null +++ b/docs/technologies.md @@ -0,0 +1,13 @@ +# Sandbox technology stack + +* [OCI](https://opencontainers.org/) compliant container images, e.g. [Docker](https://www.docker.com/) +* [Kubernetes](https://kubernetes.io/) +* [Helm charts](https://helm.sh/docs/topics/charts/) +* [CI/CD](https://en.wikipedia.org/wiki/CI/CD) pipeline configurations + +## Secret management +The sandbox is a testing and development environment, so it has the following requirements for managing secrets: + +* Use [Kubernetes secrets](https://kubernetes.io/docs/concepts/configuration/secret/) +* Don't keep secret in git repository (encrypted as well, due to rotation policy) +* Use random generated passwords, e.g. [Helm randAlphaNum method](https://helm.sh/docs/chart_template_guide/function_list/#randalphanum-randalpha-randnumeric-and-randascii) \ No newline at end of file