secrets-provider-for-k8s icon indicating copy to clipboard operation
secrets-provider-for-k8s copied to clipboard

Published 20 hours ago • verified publisher icon cyberark

Enhancement: Differentiate between deployment types using K8s API

Open sigalsax opened this issue 5 years ago • 0 comments
trafficstars

Current solution: Customer supplies this value in CONTAINER_MODE env var to Secrets Provider.

Enhanced solution: Use K8s API GET namespaces/{namespace}/pods/{pod} to get the pod's manifest and derive the deployment used for Secrets Provider.

Motivation: better UX, no need to maintain another env var. Also, ensures correct value and prevent mistakes. Requirements: Add get rights for pods to Secrets Provider's service account in K8s. This change will need to be done in the authn-client.

sigalsax avatar Jul 02 '20 13:07 sigalsax