5. Loading Encrypted Passwords

Deployments that follow a GitOps approach keep their configuration, including the property files of the CoreMedia Content Cloud applications, in a Git repository. Such property files regularly reference secrets: database passwords, credentials for commerce systems, API keys of third-party services. Committing these secrets in clear text is not acceptable, so they have to be sealed before the configuration enters version control.

This chapter describes the available options, recommends an order of preference, and documents how to decrypt property values inside a CoreMedia Content Cloud application using spring-cloud-context.