KOP Environment Manager - Security

Using sensitive variables that need to be referenced but encrypted such as passwords

Use Case:

As a platform engineer, I Want to pass in sensitive variables such as a postgres password that can be used and referenced by developers:

  • Define an environment variable as part of a postgres/RDS resource template. Mark the variable as sensitive
  • Upon creation of the resource template – validate that the password is encrypted
  • Create an environment template using the resource template
  • Deploy an environment from the environment template.
  • Validate that the password can be referenced as an environment variable. However, validate that the password itself cannot be seen/is encrypted
  • Try the same thing for a key/value pair type variable