dazzag24

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

Cloud-Init Debugging

Cloud-init combined with terraform can be a powerful tool to provision instances on startup. Debugging scripts that are run by cloud-init however are not the easiest to debug.

Logs

Usually on an Ubuntu machine a lot of what is happening can be found in the syslog

cat /var/log/syslog

	Latency Comparison Numbers (~2012)
	----------------------------------
	L1 cache reference 0.5 ns
	Branch mispredict 5 ns
	L2 cache reference 7 ns 14x L1 cache
	Mutex lock/unlock 25 ns
	Main memory reference 100 ns 20x L2 cache, 200x L1 cache
	Compress 1K bytes with Zippy 3,000 ns 3 us
	Send 1K bytes over 1 Gbps network 10,000 ns 10 us
	Read 4K randomly from SSD* 150,000 ns 150 us ~1GB/sec SSD

	#!/usr/bin/python
	import socket, ssl, select, time, re
	from thread import start_new_thread
	from struct import pack

	TYPE_ENUM = 0
	TYPE_STRING = 2
	TYPE_BYTES = TYPE_STRING

	def clean(s):

	#!/usr/bin/env python
	# coding=utf8

	# Copyright (C) 2010 Saúl ibarra Corretgé <[email protected]>
	#

	"""
	pydmesg: dmesg with human-readable timestamps
	"""

	#include "stdio.h"
	#include "stdlib.h"

	unsigned int max(unsigned int a, unsigned int b) {
	return a > b ? a : b;
	}

	unsigned int bucket(unsigned int val) {
	return val & 0xF0000000 >> 28;
	}

	# You don't need Fog in Ruby or some other library to upload to S3 -- shell works perfectly fine
	# This is how I upload my new Sol Trader builds (http://soltrader.net)
	# Based on a modified script from here: http://tmont.com/blargh/2014/1/uploading-to-s3-in-bash

	S3KEY="my aws key"
	S3SECRET="my aws secret" # pass these in

	function putS3
	{
	path=$1

	from flask import Flask
	from flask import render_template
	import csv
	import json

	app = Flask(__name__)

	@app.route('/')
	def my_runs():
	runs = []

	# Derived from: https://github.com/pydicom/pydicom/blob/master/examples/input_output/plot_read_dicom_directory.py.

	import imageio
	import matplotlib.pyplot as plt
	import numpy as np
	import pydicom

	from os import mkdir
	from os.path import join
	from PIL import Image

	use anyhow::*;
	use futures::io::{copy, AsyncReadExt, AsyncWriteExt};
	use futures::stream::StreamExt;
	use log::*;
	use smol::Async;

	use std::net;

	const PORT: u16 = 5000;