Rico Berger
Rico Berger
Hi @fbueno, the `/metrics` endpoint on port `8080` exposes the following counter metrics ``` controller_runtime_reconcile_total{controller="vaultsecret",result="error"} 13 controller_runtime_reconcile_total{controller="vaultsecret",result="requeue"} 0 controller_runtime_reconcile_total{controller="vaultsecret",result="requeue_after"} 44306 controller_runtime_reconcile_total{controller="vaultsecret",result="success"} 0 ``` It should be possible to use the...
Hi @linuxbsdfreak, I think this should be fixed in version [1.19.1](https://github.com/ricoberger/vault-secrets-operator/releases/tag/1.19.1) as `docker scan` and `trivy` do not report any vulnerabilities.
Hi @linuxbsdfreak, I would close the issue for now, since docker scan doesn't report any vulnerabilities.
Hi @TJM, I think adding support for the Google Cloud Secrets Engine would be the best way to support your use case. Unfortunately I do not have that much experience...
Ah ok, sorry for misunderstanding, hopefully I got it now: - For the authentication against Vault, the Operator should use one of the existing authentication methods (e.g. Kubernetes auth method,...
Can you maybe share the output of the following command `vault read -format=json gcp/roleset/my-key-roleset/key` without any confidential data? *Edit:* Maybe also the output of `vault read -output-curl-string gcp/roleset/my-key-roleset/key` can be...
Hi @TJM, I tried to implement support for GCP. I would need some help to verify that it is working. Can you maybe take a look at #130 and test...
Hi, this is only available via the `dev` tag yet. I would like to verify that it is working like expected before an official release.
Hi @TJM, thanks for testing. 1. Yes the secret will be read twice, when it doesn't already exists. Thats the current behavior of the operator. I will check if we...
Hi @cerebrate, thanks for your contribution. What do you think about removing the `initContainer.vaultService` and `initContainer.vaultNamespace` fields from the `values.yaml` file and instead add a `initContainer.command` field. This would gives...