GSOC Secret Manager implementation

Hi Shubham - let me give you some of my thoughts on the project and how to propose the GSOC project!

The thing I want to see most is your proposed API design for the end user - I don’t mind what the implementation is behind the scenes (environs, secret manager APIs, etc) - the key thing we need to build and make sure is good, is the design of the API we give to people using Django, as that’s the thing that will be hardest to change later.

For example:

  • How do you declare multiple environments and their different settings?
  • How do you select an environment?
  • How do you declare secret backends?
  • How do you say a secret comes from a backend?
  • How do these work with tests?
  • What is the balance you want between duplication of settings versus small settings files? Can environments inherit/copy from each other?

Obviously some of the specific details would be worked out during a GSOC project, but we’d want to know that you had a good idea about how all of these interacted going in, so we could finish off the design and then get you writing the code.

3 Likes