search

DopplerHQ / kubernetes-operator

Apache License 2.0
44 stars 18 forks source link

Add support for templating values #16

Open jaredallard opened 2 years ago

jaredallard commented 2 years ago

It'd be really cool if we had the ability to take a value from Doppler and template it, like for example this vault-secrets-operator: https://github.com/ricoberger/vault-secrets-operator#using-templated-secrets

nmanoogian commented 2 years ago

Hey @jaredallard! I'll pass this along to our product team, thanks for the recommendation!

IronCore864 commented 1 year ago

+1 after more than a year.

If it supported templates, I'd use Doppler for my new project over other choices (like AWS Secrets Manager + ExternalSecrets).

Why do I need this feature?

  1. I do not want to mount all secrets from a project as one single K8s Secret. Maybe I want to map those secrets as multiple, separate K8s Secrets; maybe I only want to create one K8s Secret but only containing a subnet (not all) of the keys.
  2. I need to add labels because some other applications depend on them to function properly.

I think I did a blog post on Doppler a year back, and I loved it. If templates are supported just like ExternalSecrets, it would be perfect. For now, I'll have to stay with ExternalSecrets.

nmanoogian commented 1 year ago

Thanks for the feedback, @IronCore864!

It has been a while since this feature request was submitted but it's still very much something we're interested in building into the Doppler Kubernetes Operator. Most of our engineering focus thus far has gone into building up the Doppler backend but we're planning to make more investments in our open source projects like this one.

In the meantime, external-secrets is a great option for accomplishing what you're describing! We added a Doppler provider to the external-secrets project so you can actually fetch secrets from Doppler using the external-secrets operator.

jaredallard commented 1 year ago

Honestly, at this point, I'm very content with the external-secrets operator. I'd be fine closing this in favor of that :)

nmanoogian commented 1 year ago

Sounds good, @jaredallard! I'm also fine leaving this open for visibility. Our goal is to bring the Doppler operator to feature parity with external-secrets and templating is a big part of that.