Uploaded image for project: 'OpenShift CFE'
  1. OpenShift CFE
  2. CFE-368

As a developer I want credentials for AWS provider to be consumed as a volume mount

XMLWordPrintable

    • CFE Sprint 217, CFE Sprint 218

      The goal of this user story is to make the operand POD consume its secret as volume mount for the CRs with AWS DNS provider.
      This removes the sensitive data from the environment of the container and adds additional access control (DAC, MAC). Also, this enables the ability to get the updated contents of the consumed secret.

      Note:

      • As the Operator is already published as TechPreview in 4.10, we must keep the the contents of the secret compatible
      • AWS_SHARED_CREDENTIALS_FILE environment variable can be used to set a custom path to AWS credentials file
      • Cloud Credentials Operator generates a secret with a dedicated field for the contents of AWS credentials file

      Acceptance Criteria

      • Code and unit tests updated
      • E2E tests migrated to the new format for the secret
      • Markdown docs updated

              dshikhar Dhriti Shikhar (Inactive)
              luzuccar@redhat.com Luigi Mario Zuccarelli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 weeks, 1 day, 3 hours
                  2w 1d 3h