Token/secret from file

[fopina]

Question

I need to load a secret from file (eg /var/run/secrets/kubernetes.io/serviceaccount/token) to use with prometheus_scrape

Right now, I've modified the helm chart command value to load it into an env variable and then I use it in token property, but is there a better way?

I'm thinking that maybe there could a generic approach to this (values from files) in vector config processing OR at least in the helm chart. I'd be happy to create a PR if there's some direction on the preferred approach.

Vector Config

command:
  - /bin/sh
  - -c
  - |
    export KUBE_TOKEN="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"
    exec /usr/local/bin/vector --config-dir "/etc/vector/"

customConfig:
  sources:
... 
    pod_metrics:
      type: prometheus_scrape
      endpoints:
        - https://kubernetes.default.svc/api/v1/nodes/$VECTOR_SELF_NODE_NAME/proxy/metrics/cadvisor
      auth:
        strategy: bearer
        token: "$KUBE_TOKEN"
      tls:
        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
...

Vector Logs

No response

[thomasqueirozb]

Hi @fopina, you might want to look into the built in secret management which is likely what you're looking for.

[fopina]

Oh missed this, interesting!

I guess then _FILE env handling can be implemented with a simple “cat $xx_FILE” as secret backend

thanks, I’ll give it a go!