I have a few services that sign some data with an asymmetric cryptography algorithm (like RSA). I need to spread some secret (private) keys between all instances of the service.
I've found a few ways to do that:
- Share keys as configuration (looks insecure when I need to spread private keys)
- Embed keys into apps/images when it's build (what if I need different keys? Would it complicate build automation?)
- Use some special key management service (what service?)
Is there a right way (or devops-way) to spread secret keys between microservices without compromises in security or automation?