infra icon indicating copy to clipboard operation
infra copied to clipboard

security: Native key provider is incompatible with some secret providers

Open dnephin opened this issue 2 years ago • 1 comments

Describe the bug

The native key provider (currently called NativeSecretProvider) accepts a secretProvider , but is partially incompatible with the env provider and incompatible with the plaintext provider because those secret providers either do not support SetSecret, or setting a secret is not meaningful (ex: setting an env var for the process).

Related to #1632

Expected behavior

When the native key provider is configured with either an env provider or plaintext provider, Infra should error before starting the server.

dnephin avatar Apr 18 '22 21:04 dnephin

This issue has not seen any activity in a while. Add a comment if this issue is still relevant, otherwise it will be closed in 7 days.

github-actions[bot] avatar Aug 04 '22 02:08 github-actions[bot]

Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

stale[bot] avatar Oct 03 '22 17:10 stale[bot]

Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

stale[bot] avatar Dec 02 '22 18:12 stale[bot]