DevOps Master Class - Part 5 - Secrets

In this part we dive into Secrets in our provisioned environment and our pipelines/workflows. Demos focused around Azure and GitHub.

Whiteboard and pipelines in the repo.

YouTube Playlist for the whole course - https://www.youtube.com/playlist?list=PLlVtbbG169nFr8RzQ4GIxUEznpNR53ERq
GitHub Repo - https://github.com/johnthebrit/DevOpsMC

Secrets Class Links:
GitHub Code Security - https://docs.github.com/en/code-security
Secret Scanning - https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning
Azure Managed Identities - https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-support-managed-identities
GitHub Secrets - https://docs.github.com/en/actions/reference/encrypted-secrets
GitHub Action Azure Login - https://github.com/Azure/login
GitHub Workflow Authentication - https://docs.github.com/en/actions/reference/authentication-in-a-workflow

Index:
00:00 Introduction
01:05 The need for secrets
03:25 NEVER PUT SECRETS IN CODE
04:11 Secret scanning
06:30 Where to put secrets
08:10 Removing the need for secrets with infrastructure
16:00 Using vaults
20:20 Demo of managed identity and vaults
25:39 Thoughts if NEED an initial secret
27:40 Secrets in pipelines and workflows
37:50 Vault access from a workflow
46:24 Workflow auth to repo
48:37 Summary