An integrated solution for the whole environment. I pick a project, it opens the IDE, sets environment variables, fires up other services/infrastructure, lets me select secrets (that might be shared between projects), lets me share secrets (with other people)... Probably something like tilt, but simpler, integrated into an IDE, and with support for secrets.
There's a VSCode extension for Hashi Vault: https://marketplace.visualstudio.com/items?itemName=owenfarr... for secrets management, but it's complicated because Vault is complicated.
A secrets extensions for my backend app would be quite easy though, I think. It's just re-implementing the cli tool.
From the IDE command palatte you could:
- Settings.backend_host = private Doocot backend || public backend
- Settings.username = (automatic)
- Settings.identity = (automatic) something like ssh key data
- Share.Individual = "select from list of identities on backend"
- Share.Group = "select from list of groups I am in"
- Share.Link = "store secret and return a valid one-time url for a non-dev"
- Read.SharedSecrets = "list secrets shared to me or my groups"
Then it'd just be some thought into the simplest way to setup and maintain groups.
You've piqued my interest in it again though, as it doesn't seem much extra work to do the above. Given the backend more or less does most of it already.
Although it's not the full environment integrated solution you're looking for, I think one step forward in terms of how we share secrets is still useful.
Thanks
(1) someone always pays