External secret store

[robert-cronin]

There are some other external secret stores that sometimes users have to utilize.

For example to use AWS ECS and to put in secret keys in during deployment we use environment variables. However sometimes these keys should not be exposed to the infrastructure team.

So AWS allows one to get secret variables as paths to the AWS SSM.

So if a user were to be using AWS ECS/SSM then where does polykey fit into that picture?

There needs to be external push/pull integrations.

The HTTP interface is basically a pull integration that any external system can arbitrarily fetch.

But in some cases external push is needed. And this is currently facilitated through the other integrations already mentioned. Users have to be able to "put" stuff into SSM. And sometimes that could mean a manual clipboard copy & paste.

This is not an implementation task, this is just something for us to be wary of during our UI/UX design.

[robert-cronin]

Closing on account of migration to gitlab