In production, a multi-replica civic API must read a Webex bot toke…

Question

In production, a multi-replica civic API must read a Webex bot token at runtime. Which secret storage approach fits that scenario?

Accepted Answer

Have the process read the token from a vault or from a platform Secret object the CD pipeline mounts. — Production replicas should draw tokens from a vault or mounted platform Secret—like badges from a secure desk—not a sticky note text file beside the binary.

Answer

Copy a plaintext secrets.txt next to the binary on each VM and hope file permissions suffice alone.

Answer

Compile the bot token into a Python constant shipped in the container image layers.

Answer

Email the token to on-call and paste it into an interactive prompt after every restart.

In production, a multi-replica civic API must read a Webex bot token at runtime. Which secret storage approach fits that scenario?

Short Explanation

Full Explanation