What about buckets? I tried to regenerate my secrets but deploys are paused. I don't know if they actually rotated or not because the old keys seem to still be working! Dear attackers, please don't read or mutate my files while my app is offline :)
yeah .. this is the suck
I've already taken my applications offline and will be migrating to a new host...
In general, the new host will have its own problems, otherwise you would've used them to begin with.
Well no- perhaps they hosted on the first paas they found, worked well enough, never had reason to evaluate something else until now.
I have used it because of the nicer developer experience and it's a little bit more friendly to my clients who find AWS too confusing to navigate; but unfortunately this has destroyed all of my confidence in Railway. Nothing personal, and I'm sympathetic to the engineers who are navigating this situation the best they can. I simply refused to believe something this egregious would happen with Secrets Manager in AWS
I'm curious where you decided to go
I moved to Render 3 or 4 months ago during Railway’s big GCP outage and have been very pleased.
If you are open to self hosting and want a railway like experience, i have been building stackdome: https://github.com/axernel-labs/stackdome . Its mit-licensed and can run on cheap vps's to large k8s clusters.
Yep. What an incredibly frustrating notice. I like Railway and I guess their hands are tied here, but wow.
I rotated mine. If you just change the keys and hit deploy it works
Saw someone on Twitter indicating that they did this, and new keys got compromised.
Link?
I tried to re-find it but could not.
It appears to work in the UI, but go test your product. Mine didn't receive the new keys.
You are most likely correct. I did something else that broke my deploy and left me in a stuck state so it's hard to say for me.