netbox-chart icon indicating copy to clipboard operation
netbox-chart copied to clipboard

enable secret injection natively via vault

Open imdhruva opened this issue 1 year ago • 0 comments

The charts currently mandates to leverage a k8s secret. One could argue that k8s secrets are not really secure. Ideally we would want these secrets to be set by an injector (ex: Vault - either via custom initContainer or updated entrypoint script) to place a secret file in the secrets directly being scanned by configurations.py (ex: run/config/extra/vault). The configuration.py should then read the secrets from secret file.

The proposed changes are described as under:

  • [ ] invoke _load_yaml() once again after loading all the secrets; thereby any secrets inject override the default secrets
  • [ ] enable command and arg to be overriden for housekeeping and worker pods

imdhruva avatar Jul 28 '23 04:07 imdhruva