infra
infra copied to clipboard
security: Native key provider is incompatible with some secret providers
Describe the bug
The native
key provider (currently called NativeSecretProvider
) accepts a secretProvider
, but is partially incompatible with the env
provider and incompatible with the plaintext
provider because those secret providers either do not support SetSecret
, or setting a secret is not meaningful (ex: setting an env var for the process).
Related to #1632
Expected behavior
When the native
key provider is configured with either an env
provider or plaintext
provider, Infra should error before starting the server.
This issue has not seen any activity in a while. Add a comment if this issue is still relevant, otherwise it will be closed in 7 days.
Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.