Manage Distributed Secrets in Applications on Cloud Foundry With Spring Cloud Vault - Andreas Falk
Channel: Cloud Foundry
Date: 2017-10-18

Manage Distributed Secrets in Applications on Cloud Foundry With Spring Cloud Vault - Andreas Falk, NovaTec Consulting GmbH

Running multiple instances of spring boot based microservices on CloudFoundry is widely adopted these days. But what about your secrets? Do you spread all values using application local property files? Do you still store secrets in clear text? In case you are encrypting passwords where do you store the key to decrypt these? Do you already rotate database credentials regularly? In this session you will learn how to externalize your configuration and store your secrets safely using the recently released Spring Cloud Vault project. After a general introduction into Vault, Andreas will show how spring cloud vault facilitates the integration of vault into your application running on CloudFoundry platform. After this session you will be well prepared using externalized configuration and storing any secrets in a secure way.

About Andreas Falk
Andreas Falk (@andifalk) has been working in enterprise application development projects for more than twenty years. He is working as managing consultant for NovaTec Consulting GmbH in Germany since five years.
In various projects, he has since been around as consultant, architect, coach, developer and tester. His ongoing project is about implementing a cloud native application (angular frontend with spring boot microservices) on a private cloud platform (based on CloudFoundry). His focus is on the agile development of cloud native applications using the complete Spring platform. As an OWASP member, he has a closer look on all aspects of application security as well. 
Andreas is a frequent speaker on conferences like Spring I/O, JAX, OOP and OWASP AppSecEU (see http://lanyrd.com/profile/andifalk/sessions).