ECS and Vault: Shhhhh I have a secret
kickstarter.com
kickstarter.com
export $(envconsul -once -config="/envconsul-config.hcl" env | xargs)
What they really should do is add an "--as-exports" option that outputs lines of properly escaped "export FOO=<value>" lines. That output could then be processed in a script via: envconsul --as-exports | source /dev/stdin [1] https://square.github.io/keywhiz/
[2] https://github.com/codahale/sneakerWe did. Those are great projects.
Personally, I see Vault having a lot of community momentum behind it; and it can easily solve some complicated security infrastructure beyond storing secrets (the PKI, MySQL & ssh secret backends are particularly compelling).