CI/CD Secrets Management Best Practices
Keep API keys, tokens, and database credentials safe in CI/CD with rotation, scoping, secret managers, and OIDC-based authentication.
5 posts · page 1 of 1
Keep API keys, tokens, and database credentials safe in CI/CD with rotation, scoping, secret managers, and OIDC-based authentication.
A practical walkthrough of ConfigMaps and Secrets in Kubernetes, including how to inject them as environment variables, mount as files, and rotate safely.
Practical patterns for managing Kubernetes Secrets safely: encryption at rest, external secret stores, RBAC scoping, rotation, and avoiding common leaks.
Learn how Next.js loads environment variables, when they are exposed to the browser, and how to keep secrets out of your client bundle.
Learn how to store, scope, and rotate secrets in GitHub Actions. Cover repository, environment, and organization secrets, plus OIDC for cloud access without static keys.