FIREBREAK: AWS Secrets Manager and Config Provider Secret Store CSI Driver

[sj-williams]

Background

Following initial investigation into leveraging AWS Secrets Manager for Concourse secrets management, a spike into ASCP CSI driver:

The AWS provider for the Secrets Store CSI Driver allows you to make secrets stored in Secrets Manager and parameters stored in Parameter Store appear as files mounted in Kubernetes pods.

https://github.com/aws/secrets-store-csi-driver-provider-aws

https://docs.aws.amazon.com/secretsmanager/latest/userguide/integrating_csi_driver.html

Questions / Assumptions

Definition of done

• [ ] Firebreak finding documented appropriately
• [ ] Demo completed
• [ ] Decision made on whether to progress Firebreak work
• [ ] Does next steps require User Research?
• [ ] Firebreak next step Issues created
• [ ] New Issues referenced in this story before closure