search

TJM / vault-gcp-secrets

Create a Kubernetes secret with the service account key from a vault gcp roleset. This handles generic (Opaque) secrets or docker-registry (dockerconfigjson) secrets.
Apache License 2.0
4 stars 1 forks source link

Deprecate this chart in favor of hashicorp/vault-secrets-operator. #85

Open TJM opened 1 year ago

TJM commented 1 year ago

Should this chart be deprecated in favor of the hashicorp/vault-secrets-operator?

The original purpose of this chart was to fill the void of ricoberger/vault-secrets-operator, which could not handle dynamic secrets (such as gcp secrets engine service account keys).

TJM commented 1 year ago

This is currently a no-go as the hashicorp vault-secrets-operator does not appear to support templates or scripts.

TJM commented 3 months ago

Hashicorp's Vault-Secrets-Operator does now support secret templating, and we have successfully tested it. We will maintain this chart for a little while longer to allow teams to transition to VSO, then we will archive it.