Playground engine: Generate and inject secrets on startup

Open

iximiuzopened 1y ago

Need a config like:

playground:
  name: <name>
  secrets:
     FOO: {fixed-string}
     BAR: {random():<len>}
  machines:
    - name: node-01
      secrets:
        FOO: /run/secrets/iximiuz/foo
        BAR: /run/secrets/iximiuz/bar
    - name: node-02
      secrets:
         BAR: /run/secrets/iximiuz/bar

Activity

rossbachp1y ago

Yes, that was a really nice feature!

It might also be possible to implement something similar by fetching secrets from a KMS (Key Management Service) using a token stored at the playground or account level. However, this approach introduces challenges—particularly around storing secrets securely and complying with data protection regulations (e.g., GDPR/Datenschutz).

That said, auto-generated secrets are still incredibly useful—especially for bootstrapping authentication to databases or backend services in labs. They provide a clean, hands-off way to simulate real-world setups without requiring users to manage credentials manually.

Would love to hear your thoughts on the trade-offs!