-
Currently all ClusterLink secrets are created as type `Opaque`:
```sh
$ kubectl get secret --namespace clusterlink-system
NAME TYPE DATA AGE
cl-controlplane Opaque 2 …
-
## Tell us about the problem you're trying to solve
It turns out that `playload` field of `secrets` store plain password, while `configuration` field of `actor` table stores encrypted secrets. Is it …
-
A `client_secret` should not be stored as plain text in the database, an option might be to use something like [Vault](https://www.vaultproject.io). Or come up with a solution that fits the purpose of…
-
Based on https://github.com/domain-protect/domain-protect/pull/199
We should move the management and configuration of secrets used by the Lambdas to call third-party servies outside of the Terrafor…
-
With Hydra and snabb bot we have to store secrets besides the deployment. We don't want them to be exposed, so maybe we should consider encrypting them into git.
https://github.com/StackExchange/blac…
-
We need to submit a PR to https://github.com/kubernetes-sigs/secrets-store-csi-driver to add openbao as a valid provider, as right now, our `SecretProviderClass` resources all have to use `provider: v…
-
### Describe the problem
Right now Parameter Store is being used as storage for secrets in EKS cluster.
There are certain secrets such as database passwords that need to be rotated after a certain a…
-
**Describe the bug**
Recently my external-secrets helm installation suddenly got broken:
```text
Error: unknown flag: --enable-partial-cache
Usage:
external-secrets certcontroller [flags]
…
-
As a Ministry Security Officer, I would like secrets to be stored and controlled using Hashicorp Vault as this keeps the certificates within Government infrastructure.
**Acceptance Criteria**
- [ ] M…
-
Delete `kubernetesReleaseVersion` helm value and instead use `Capabilities.KubeVersion` to determine the correct api version.
for reference: https://github.com/kubernetes-sigs/secrets-store-csi-dri…