How to handle passwords during deployment?

[jamierajewski]

Specifically:

• Generating a Condor pool password and sharing it on all of the machines (now using tokens, so this doesn't matter) Back to using passwords, so this matters again
• Generating/securely storing the LDAP password

The solution at the moment is to create them on my machine, then reference them in a Terraform variable which will then be used at the time of deployment without being stored. This should be sufficient, but get feedback and try to limit usage of passwords where possible.

[jamierajewski]

Use the sensitive tag for password fields - Closed by b02e884