# dynamic secrets

Published articles for dynamic secrets.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Managing Environment Variables and Secrets in DevOps

DevFeed: [Managing Environment Variables and Secrets in DevOps](<https://devfeed.tech/articles/managing-environment-variables-and-secrets-in-devops-17486.md>)

Original publisher: [Read original article](<https://kodekloud.com/blog/managing-environment-variables-and-secrets-devops/>)

Author: Pramodh Kumar M

Published: 2026-08-01T13:00:47Z

Content type: tutorial

Language: en

Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More](<https://devfeed.tech/sources/kubernetes-kodekloud-blog-devops-cloud-kubernetes-ai-tutorials-more.md>)

Topics: [DevOps](<https://devfeed.tech/topics/devops.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [GitGuardian](<https://devfeed.tech/topics/gitguardian.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [ci-cd-secrets-management](<https://devfeed.tech/tags/ci-cd-secrets-management.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [collaboration-tools](<https://devfeed.tech/tags/collaboration-tools.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [container](<https://devfeed.tech/tags/container.md>), [crash](<https://devfeed.tech/tags/crash.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [dynamic-secrets](<https://devfeed.tech/tags/dynamic-secrets.md>), [env-file-security](<https://devfeed.tech/tags/env-file-security.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [gitguardian](<https://devfeed.tech/tags/gitguardian.md>), [github](<https://devfeed.tech/tags/github.md>), [hardcoded-credentials](<https://devfeed.tech/tags/hardcoded-credentials.md>), [hashicorp-vault](<https://devfeed.tech/tags/hashicorp-vault.md>), [jira](<https://devfeed.tech/tags/jira.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-secrets](<https://devfeed.tech/tags/kubernetes-secrets.md>), [leak](<https://devfeed.tech/tags/leak.md>), [managing-environment-variables-and-secrets](<https://devfeed.tech/tags/managing-environment-variables-and-secrets.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [safety](<https://devfeed.tech/tags/safety.md>), [sealed-secrets](<https://devfeed.tech/tags/sealed-secrets.md>), [secret-rotation](<https://devfeed.tech/tags/secret-rotation.md>), [secret-scanning](<https://devfeed.tech/tags/secret-scanning.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [secrets-management-best-practices](<https://devfeed.tech/tags/secrets-management-best-practices.md>), [security](<https://devfeed.tech/tags/security.md>), [storage](<https://devfeed.tech/tags/storage.md>), [terraform](<https://devfeed.tech/tags/terraform.md>), [vault](<https://devfeed.tech/tags/vault.md>)

### AI overview

A guide to managing environment variables and secrets in DevOps. It explains how secrets escape through repositories, processes, crash reports, containers, collaboration tools, Kubernetes Secrets, and Terraform state, and discusses storage, access controls, lifecycles, and rotation.

### Source excerpt

Nearly 29 million secrets were pushed to public GitHub in a single year, and most teams still discover their own leaks by accident. Here is how environment variables actually escape, and what to use instead at each stage.

## 🔐 AccessOrbit: One-Click, Time-Limited DB Access with Hashicorp Vault & GitHub Actions

DevFeed: [🔐 AccessOrbit: One-Click, Time-Limited DB Access with Hashicorp Vault & GitHub Actions](<https://devfeed.tech/articles/accessorbit-one-click-time-limited-db-access-with-hashicorp-vault-github-actions-23697.md>)

Original publisher: [Read original article](<https://engineering.theblueground.com/accessorbit-one-click-time-limited-db-access-with-hashicorp-vault-github-actions/>)

Author: Pavlos Petros Tournaris

Published: 2025-05-06T09:36:40Z

Content type: tutorial

Language: en

Sources: [Blueground Engineering blog](<https://devfeed.tech/sources/blueground-engineering-blog.md>)

Topics: [HashiCorp Vault](<https://devfeed.tech/topics/hashicorp-vault.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Security](<https://devfeed.tech/topics/security.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Slack](<https://devfeed.tech/topics/slack.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [databases](<https://devfeed.tech/tags/databases.md>), [dynamic-secrets](<https://devfeed.tech/tags/dynamic-secrets.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [hashicorp-vault](<https://devfeed.tech/tags/hashicorp-vault.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [notifications](<https://devfeed.tech/tags/notifications.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Blueground describes AccessOrbit, a self-service workflow for requesting temporary database credentials. It combines HashiCorp Vault, GitHub Actions, GitHub Issues, and Slack to support auditable requests, approvals, and time-limited access.

### Source excerpt

At some point, most platform teams face a common challenge: how to provide engineers with timely, auditable, and secure access to production (or staging) databases--without blowing a hole in security or flooding Slack with manual approval chaos. At Blueground, we've implemented a fully automated, self-serve