Secret Management
intermediateDefinition
The careful way teams handle the sensitive things their apps need: passwords, API keys, signing tokens. The rules: never paste them into the code, never email them around, store them in a locked-down vault, and only hand them to the app at the moment it actually runs.
In the wild
An online store needs the password to its payments account. Instead of writing the password into the code where any developer could see it, the team puts it in a secure vault. The live website fetches it from the vault each time it starts up. And nobody else ever sees the actual value.
More from DevOps & Deployment
Blue-Green Deployment
A way of releasing a new version of an app with no downtime. You set up the new version on a second, identical environment running quietly alongside the live one. Once it's tested and looks good, you flip all visitors over to the new environment in an instant. And if something goes wrong, you flip back just as fast.
Canary Release
A careful way to launch a new version: instead of giving it to everyone at once, you send it to a small group first and watch how it performs. If everything looks healthy, you let in more people. If problems show up, you stop the rollout before most users ever notice.
CI/CD (Continuous Integration / Continuous Delivery)
An automatic assembly line for software. Every time someone saves a change, the system runs the tests, packages the new version, and (if everything looks good) puts it in front of users: all without anyone clicking a deploy button. It catches mistakes early and lets teams ship updates many times a day instead of once a month.
Container
A neat little package that bundles an app together with everything it needs to run: the right tools, the right settings, the right helper files. Once it's packaged, the container will run the same way on any computer, which solves the classic 'but it worked on my laptop!' problem.
Deployment
The act of putting a new version of an app or website live so real people can use it. In modern teams, deployments happen smoothly and often, sometimes many times a day, instead of being big, risky events that take all weekend.
Docker
The most popular tool for building and running containers. Those neat self-contained packages that hold an app plus everything it needs. Docker is what made containers easy enough for everyday use; saying 'I containerized it' usually means 'I used Docker.'