1

Constants are initialized via either a yaml config or env variables. Is it possible to change constants at runtime, or pass constants dynamically during startup from a source other than env vars or yaml?   My use case  is, I don’t want to leave secrets anywhere on a filesystem a hacker can use to exploit the app   I think that includes runtime args, as they are also “saved” on the filesystem in one’s shell history (~/.bash_history etc) or the process can be listed (“ps -ef | grep java”) and expose secrets.   Ideally I want to read app constants/config from a secrets service like HashiCorp’s Vault

asked 2022-07-06

2 answers