New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow use of encrypted secrets #73838

Open
nhooyr opened this Issue Feb 8, 2019 · 7 comments

Comments

Projects
None yet
6 participants
@nhooyr
Copy link

nhooyr commented Feb 8, 2019

See #28538

If secret contents could be encrypted/decrypted by an encryption provider plugin (e.g., KMS on AWS) running in the kube master or in kubelets (though the kubelet option may require more complex IAM setup), then it would be acceptable to check in secret manifests into source control.

Helm supports this via https://github.com/futuresimple/helm-secrets

@nhooyr

This comment has been minimized.

Copy link
Author

nhooyr commented Feb 8, 2019

I have no idea what a sig label is.

@nhooyr

This comment has been minimized.

Copy link
Author

nhooyr commented Feb 10, 2019

I guess the solution here is to just use helm if you want this feature?

@neolit123

This comment has been minimized.

Copy link
Member

neolit123 commented Feb 10, 2019

/sig auth

@k8s-ci-robot k8s-ci-robot added sig/auth and removed needs-sig labels Feb 10, 2019

@liggitt

This comment has been minimized.

Copy link
Member

liggitt commented Feb 11, 2019

/assign @immutableT

@mourya007

This comment has been minimized.

Copy link
Contributor

mourya007 commented Feb 15, 2019

@immutableT Are you working on this issue ?

@immutableT

This comment has been minimized.

Copy link
Contributor

immutableT commented Feb 15, 2019

Yes, I will be submitting a proposal (hopefully next week).

@mourya007

This comment has been minimized.

Copy link
Contributor

mourya007 commented Feb 15, 2019

Yes, I will be submitting a proposal (hopefully next week).

Thanks for the reply, Let me know If I can give helpful hand on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment