Is a subscription key considered a secret?

[Roger Waldner]

We automatically set up our Proxmox nodes using ansible and need to store the subscription keys somewhere (in our source repository, in the filesystem, etc.)

Now the question arose whether a subscription key is something that can be stored in plaintext or if it should considered as a secret (like a password or a private key).

What is the "official" opinion (eg. from Proxmox) or how do other subscribers handle their subscription keys?

 

[G0ldmember]

It's always a bad idea to store credentials or keys in the filesystem or in a versioning system like git oder subversion. If you're using ansible, you should put it in ansible vault.

 

[fabian]

yes, it should be considered a secret (if only because if it leaks, you might temporarily lose your subscription status because someone else can re-issue it to a different server).