As a SRE I constantly write python scripts or nodeJS scripts to create workflows for my development team. These scripts mainly deal with loadbalancing CDN traffic, changing DNS settings, provisioning new cloud containers etc. I have about 30 scripts so far and we all use internal git for version control. After speaking to a few of my friends I found out that many of them have created scripts with the exact same functionality and they wished if I could share my script via github. As usual, I can’t since all of these scripts sometimes contain tokens or access keys that cannot be shared. I am wondering if everyone else has the same problem and if there are any paid cloud service that does this? The closest vendor I see is Github Actions.
True, we are transitioning to using env variables. But still wouldn’t be able to share the scripts externally right?
From a security perspective if you’ve redesigned your scripts it should be fine. But from a company IP perspective, you should consult your legal team or just ask your management. It likely depends on your company policies.
Agreed, and I am wondering if someone would consider building their workflows on an online tool rather than just writing down scripts and saving it internally.
Why can't your friends just get your scripts from the internal git repos? Is there a shared internal network drive you can put it on?
These are for folks outside of my organization. So if someone wishes to load-balance or spin up a new docker container + send a slack message when it’s done. All these are doable but why does everyone need to build it themselves
Oh I see. I thought this was for co-workers.
Just use Powershell for ops scripts. It has native support for everything, including creating powerful bash-style interfaces for your scripts. There's also a package manager so you can easily share your code.
No one outside of Microsoft uses Powershell. Not even some people in Microsoft use it.
Irrelevant
Why not use a password vault service? Check out python keyring on pypi
.env or config.py is what you want in your design.
Tech Industry
Yesterday
3101
Avoid teams with only Chinese or Indians especially with a Chinese/Indian manager
Tech Industry
2d
41488
Worried that our top performer is an attrition risk. How do managers handle this?
Tech Industry
Yesterday
1059
I haven’t done shit today!
Work Visa
Yesterday
689
Amazon suspended Green Card for H1Bs
India
Yesterday
268
Heard congress distributing wealth
I know this is a tangent, but you should reconsider your design that hard codes secrets into your scripts. Consider not committing them into source as well..