Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add generator-(function) for existing secrets #1028

Open
MatteoVoges opened this issue Aug 29, 2023 · 1 comment
Open

Add generator-(function) for existing secrets #1028

MatteoVoges opened this issue Aug 29, 2023 · 1 comment
Labels

Comments

@MatteoVoges
Copy link
Contributor

Describe the feature
When working with refs in kapitan it could be useful to initialize kapitan refs without a generator function like random:str.
So I thought of a function exists, that signalizes kapitan, that the secret / ref already exists in the secret engine/ backend.

This might only apply to some secret engines like vaultkv engine, that has writing enabled when #958 gets merged.

The usecase would be, that if I have my secrets already stored in my vault, then I just want to initialize the kapitan-ref-files, but at the moment I have to overwrite it (with kapitan refs or with random:str). So now I just tell kapitan, that the secret already exists and kapitan fetches the secret from the vault and then creates the reffile.

On the other hand we could have a generator function, that takes the secret value as input like ?{backend:my/path||value:mysecret}. This would allow us to store the secret directly without the need of the kapitan refs command. However this would require that the developer removes the secret after creation, so that no secret value is plain in the inventory.

@MatteoVoges
Copy link
Contributor Author

Update: This is already implemented on nexenio-dev but will be integrated in the future.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant