kube-secret-syncer

kube-secret-syncer copied to clipboard

Update Security Model docs

1

This should address https://github.com/contentful-labs/kube-secret-syncer/issues/39 You should be able to configure kube-secret-syncer with environment variables/config files/... instead of using the IAM Role of the instance, and benefit from IAM restrictions if...

yannh

Copied secrets are stored unencrypted by default

3

The README should mention that using https://github.com/contentful-labs/kube-secret-syncer alone will result in external secrets being stored unencrypted in etcd and therefore open to attack (either via the etcd server or via...

glyn

feat: enable secret types

2

The original code assume that all synced secrets would be `Opaque`. This change allows the user to add the correct key to the `SyncedSecret` to set the `SecretType`

dwa012-zmi

Bumps [github.com/gogo/protobuf](https://github.com/gogo/protobuf) from 1.3.1 to 1.3.2. Release notes Sourced from github.com/gogo/protobuf's releases. Release v.1.3.2 Tested versions: go 1.15.6 protoc 3.14.0 Bug fixes: skippy peanut butter Commits b03c65e skippy peanut butter...

dependabot[bot]

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.18.6 to 0.18.14. Commits 28af562 Update dependencies to v0.18.14 tag 649866c Merge pull request #95354sfowl/automated-cherry-pick-of-#95316 3214b66 Merge pull request #95964dprotaso/automated-cherry-pick-of-#95939 36ad760 Re-add the event recorder in the...

dependabot[bot]

# What is changing and why? The secret-syncer keeps a list of secret metadata that is uses for fetching secrets from the cache, and for filtering. Previously this list was...

juliabiro

Migrates to Github Package / GHCR instead of Dockerhub, uses Github actions for ease of authentication.

yannh