akuity / kargo

Application lifecycle orchestration
https://kargo.akuity.io/
Apache License 2.0
1.39k stars 114 forks source link

Credential Management should support Secrets needed by Analysis/Verification #2138

Open jessesuen opened 3 weeks ago

jessesuen commented 3 weeks ago

Proposed Feature

UI should provide a way to manage secrets needed by Analysis/Verification.

Motivation

AnalysisRuns can reference secrets, including Job metrics, but currently users cannot manage such secrets from the UI.

Suggested Implementation

We can still insist on labeling Secrets with kargo.akuity.io/cred-type label, and ignore all others, but our UI could do this as a convenience for users.

Meanwhile, applying such secrets for anyone using kargo apply can reject Secrets that don't explicitly opt-in as a Kargo Secret with the label.