DEV Community

Discussion on: [DEV PART 2/2] Serverless Highscore Go API with Faasd and CockroachDB

Collapse
 
alexellis profile image
Alex Ellis

Thanks for sharing your knowledge Talha. I would just mention that we don't recommend that any user use environment variables for secrets. We have secret support in OpenFaaS on Kubernetes and faasd.

See also faas-cli secret create --help for more.

Environment variables show up in the API and could leak in other places like application dumps.