Uploaded image for project: 'Origin Community Distribution of Kubernetes'
  1. Origin Community Distribution of Kubernetes
  2. OKD-85

Investigate use of Vault for the operateFirst pipelines

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • False
    • Hide

      None

      Show
      None
    • False

      As an OKD engineer, I would like to investigate the value of using Vault on OperateFirst, for storing screts such as credentials to push to the quay's OKD organisation, the signing key, and others, instead of storing those in plain secrets.

      Acceptance criteria:
      Show how a tekton task can consume a kv pair from the vault without creating an intermediate secret in the namespace

      References:
      https://www.operate-first.cloud/apps/content/vault_eso/write_to_vault_with_k8s.html
      https://github.com/operate-first/support/issues/1130 (request for okd dedicated path on vault)
      https://vault-ui-vault.apps.smaug.na.operate-first.cloud/ (sign in like this without a role or mount path)

              Unassigned Unassigned
              skhoury@redhat.com Sherine Khoury
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: