Externalized Configuration Best Practices

Profiles & Secrets

💡 Externalized, configuration, EK, "SEPARATE, KEY, RING" jaisa, hai — HAR, ENVIRONMENT, (dev, staging, prod) ki, apni, "KEYS" (config, VALUES) hoti, HAIN, JO, CODE, se, ALAG, RAKHI, jaati, hain, taaki, EK, HI, CODE, HAR, ENVIRONMENT, mein, KAAM, kar, sake.

Spring, PROFILES, (application-dev.yml, application-prod.yml) se, ENVIRONMENT-SPECIFIC, configuration, MANAGE, ki, ja, sakti, hai — spring.profiles.active, se, DECIDE, hota, hai, ki, KAUN, sa, PROFILE, ACTIVE, hai.

SENSITIVE, data, (passwords, API, keys) ko, PLAIN-TEXT, config, files, mein, STORE, karna, AVOID, karna, CHAHIYE — Vault, (HashiCorp) ya, Config, Server, ki, ENCRYPTION, capabilities, USE, karni, CHAHIYE.

# application-prod.yml:
spring:
  datasource:
    url: ${DATABASE_URL}
    password: '{cipher}AQBl2fF8...'   # encrypted, value

# JVM argument: -Dspring.profiles.active=prod

📤

Externalized, configuration, EK, "SEPARATE, KEY, RING" jaisa, hai — HAR, ENVIRONMENT, (dev, staging, prod) ki, apni, "KEYS" (config, VALUES) hoti, HAIN, JO, CODE, se, ALAG, RAKHI, jaati, hain, taaki, EK, HI, CODE, HAR, ENVIRONMENT, mein, KAAM, kar, sake.

1 / 2

⚡ झट से Recap

Spring Profiles, se, environment-specific, config, (dev, staging, prod)
Sensitive data, ko, encrypt, karna, CHAHIYE — plain-text, mein, kabhi, nahi
Config Server, mein, BUILT-IN, encryption/decryption, support, hai

इस page में (2 subtopics)

Spring, Boot, MULTIPLE, config, sources, (command-line, args, environment, variables, application.yml, Config, Server) ko, EK, SPECIFIC, PRECEDENCE, ORDER, mein, MERGE, karta hai — command-line, args, GENERALLY, HIGHEST, precedence, PAR, HOTE, HAIN.

💡Tip: Config, precedence, order, ko, samajhna, DEBUGGING, ke, liye, CRITICAL, hai — jab, EK, VALUE, EXPECTED, se, DIFFERENT, ho, tab, YE, SAMAJHNA, ZAROORI, hai, ki, KAUN, sa, SOURCE, "WIN" kar, raha, hai.

Kubernetes, PAR, deploy, karte, waqt, Kubernetes, Secrets, (base64, encoded, — TRUE, encryption, nahi) aur, Config, Server, encryption, (TRUE, cipher-based) mein, EK, CHOICE, hai — SENSITIVE, DATA, ke, liye, EK, DEDICATED, secrets, manager, (Vault) aksar, BEHTAR, hai.

← पिछला🔄 Dynamic Config Refresh अगला →🔌 Resilience4j Circuit Breaker

Code10x

Externalized Configuration Best Practices

Config Precedence Order

Using Kubernetes Secrets vs Config Server Encryption