payload: {"action":"created","issue":{"url":"https://api.github.com/repos/open-zaak/open-zaak/issues/384","repository_url":"https://api.github.com/repos/open-zaak/open-zaak","labels_url":"https://api.github.com/repos/open-zaak/open-zaak/issues/384/labels{/name}","comments_url":"https://api.github.com/repos/open-zaak/open-zaak/issues/384/comments","events_url":"https://api.github.com/repos/open-zaak/open-zaak/issues/384/events","html_url":"https://github.com/open-zaak/open-zaak/issues/384","id":547412811,"node_id":"MDU6SXNzdWU1NDc0MTI4MTE=","number":384,"title":"As a maintainer, I want to isolate environment configuration secrets from the tooling","user":{"login":"sergei-maertens","id":5518550,"node_id":"MDQ6VXNlcjU1MTg1NTA=","avatar_url":"https://avatars3.githubusercontent.com/u/5518550?v=4","gravatar_id":"","url":"https://api.github.com/users/sergei-maertens","html_url":"https://github.com/sergei-maertens","followers_url":"https://api.github.com/users/sergei-maertens/followers","following_url":"https://api.github.com/users/sergei-maertens/following{/other_user}","gists_url":"https://api.github.com/users/sergei-maertens/gists{/gist_id}","starred_url":"https://api.github.com/users/sergei-maertens/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sergei-maertens/subscriptions","organizations_url":"https://api.github.com/users/sergei-maertens/orgs","repos_url":"https://api.github.com/users/sergei-maertens/repos","events_url":"https://api.github.com/users/sergei-maertens/events{/privacy}","received_events_url":"https://api.github.com/users/sergei-maertens/received_events","type":"User","site_admin":false},"labels":[{"id":1474230407,"node_id":"MDU6TGFiZWwxNDc0MjMwNDA3","url":"https://api.github.com/repos/open-zaak/open-zaak/labels/EPIC:%20Testst%20and%20Deployment","name":"EPIC: Testst and Deployment","color":"4B0082","default":false,"description":""}],"state":"open","locked":false,"assignee":{"login":"sergei-maertens","id":5518550,"node_id":"MDQ6VXNlcjU1MTg1NTA=","avatar_url":"https://avatars3.githubusercontent.com/u/5518550?v=4","gravatar_id":"","url":"https://api.github.com/users/sergei-maertens","html_url":"https://github.com/sergei-maertens","followers_url":"https://api.github.com/users/sergei-maertens/followers","following_url":"https://api.github.com/users/sergei-maertens/following{/other_user}","gists_url":"https://api.github.com/users/sergei-maertens/gists{/gist_id}","starred_url":"https://api.github.com/users/sergei-maertens/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sergei-maertens/subscriptions","organizations_url":"https://api.github.com/users/sergei-maertens/orgs","repos_url":"https://api.github.com/users/sergei-maertens/repos","events_url":"https://api.github.com/users/sergei-maertens/events{/privacy}","received_events_url":"https://api.github.com/users/sergei-maertens/received_events","type":"User","site_admin":false},"assignees":[{"login":"sergei-maertens","id":5518550,"node_id":"MDQ6VXNlcjU1MTg1NTA=","avatar_url":"https://avatars3.githubusercontent.com/u/5518550?v=4","gravatar_id":"","url":"https://api.github.com/users/sergei-maertens","html_url":"https://github.com/sergei-maertens","followers_url":"https://api.github.com/users/sergei-maertens/followers","following_url":"https://api.github.com/users/sergei-maertens/following{/other_user}","gists_url":"https://api.github.com/users/sergei-maertens/gists{/gist_id}","starred_url":"https://api.github.com/users/sergei-maertens/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sergei-maertens/subscriptions","organizations_url":"https://api.github.com/users/sergei-maertens/orgs","repos_url":"https://api.github.com/users/sergei-maertens/repos","events_url":"https://api.github.com/users/sergei-maertens/events{/privacy}","received_events_url":"https://api.github.com/users/sergei-maertens/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2020-01-09T11:13:32Z","updated_at":"2020-01-09T14:06:35Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"... so I can handle different secrets and environments properly and securely.\r\n\r\n**Description**\r\nFor the different target environments (kubernetes, single-server, vmware appliance), we keep a number of secrets in the Ansible Vault that are instance specific (database credentials, secret keys...). With every installation, these variables change, but the deployment code/configuration does not.\r\n\r\nCurrently all these secrets are encrypted using the same ansible vault password - which means that the kubernetes/single server deployment use the same vault password.\r\n\r\nWe should document the structure of these variable files (include examples), and remove the actual secrets from this repository. Actual secrets can then live in separate repositories (per environment) and be added as submodules for the actual deployment.\r\n\r\nPerhaps it would also be beneficial to completely separate the deployment tooling in its own repository.\r\n"},"comment":{"url":"https://api.github.com/repos/open-zaak/open-zaak/issues/comments/572576189","html_url":"https://github.com/open-zaak/open-zaak/issues/384#issuecomment-572576189","issue_url":"https://api.github.com/repos/open-zaak/open-zaak/issues/384","id":572576189,"node_id":"MDEyOklzc3VlQ29tbWVudDU3MjU3NjE4OQ==","user":{"login":"joeribekker","id":96970,"node_id":"MDQ6VXNlcjk2OTcw","avatar_url":"https://avatars1.githubusercontent.com/u/96970?v=4","gravatar_id":"","url":"https://api.github.com/users/joeribekker","html_url":"https://github.com/joeribekker","followers_url":"https://api.github.com/users/joeribekker/followers","following_url":"https://api.github.com/users/joeribekker/following{/other_user}","gists_url":"https://api.github.com/users/joeribekker/gists{/gist_id}","starred_url":"https://api.github.com/users/joeribekker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joeribekker/subscriptions","organizations_url":"https://api.github.com/users/joeribekker/orgs","repos_url":"https://api.github.com/users/joeribekker/repos","events_url":"https://api.github.com/users/joeribekker/events{/privacy}","received_events_url":"https://api.github.com/users/joeribekker/received_events","type":"User","site_admin":false},"created_at":"2020-01-09T14:06:35Z","updated_at":"2020-01-09T14:06:35Z","author_association":"COLLABORATOR","body":"Please discuss first before commencing."}}
other: {"actor":{"display_login":"joeribekker"}}