Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Kubernetes secrets / dapr #410

Open
fgheysels opened this issue Apr 19, 2023 · 0 comments · May be fixed by #412
Open

Support Kubernetes secrets / dapr #410

fgheysels opened this issue Apr 19, 2023 · 0 comments · May be fixed by #412
Assignees
Labels
feature-request All issues related to feature requests by customers secret-provider All issues related to secret providers
Milestone

Comments

@fgheysels
Copy link
Member

Arcus.Security has a great support for Azure KeyVault and some other secret providers

However, afaik, we do not currently support Kubernetes secrets. Actually, a Kubernetes secret can be just retrieved from the configuration, and that is also how I'm doing it right now. (I am adding the configuration as a secret provider). Maybe be can improve this ? Making it a bit more explicit ?

Next to that, when creating services that run in Kubernetes, people are also making use of Dapr. One of the Dapr components is for secret management.
It allows you to abstract access to your secret store: you configure the dapr secret component to connect to KeyVault for instance , and from your application code you use the dapr api to retrieve the secret. More info can be found here.

I think we should consider creating an Arcus secretprovider so that you're able to interact with your Dapr secret component. This allows developers to abstract away the communication with the Dapr API to get their secrets.

Originally posted as a discussion here

@stijnmoreels stijnmoreels added this to the v1.10.0 milestone Apr 20, 2023
@stijnmoreels stijnmoreels added feature-request All issues related to feature requests by customers secret-provider All issues related to secret providers labels Apr 20, 2023
@stijnmoreels stijnmoreels self-assigned this Jun 29, 2023
@stijnmoreels stijnmoreels linked a pull request Jul 5, 2023 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request All issues related to feature requests by customers secret-provider All issues related to secret providers
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants