argoproj-labs / argocd-vault-plugin

An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets
https://argocd-vault-plugin.readthedocs.io
Apache License 2.0
784 stars 185 forks source link

Do not create secret, if it cannot be filled #611

Open srekkas opened 4 months ago

srekkas commented 4 months ago

Is your feature request related to a problem? Please describe. Due to some problems creating secret, e.g. reaching Delinea Secret server, bad certificate or so secret cannot be filled.

Now it is created with variable , instead of pulled secret

Describe the solution you'd like Make some option, that if secret cannot be pulled, do not create it at all

Describe alternatives you've considered Use some other secret store.

Additional context

kind: Secret
apiVersion: v1
metadata:
  name: tls-secret
  namespace: openshift-gitops
  annotations:
    avp.kubernetes.io/path: "XXX"
type: kubernetes.io/tls
data:
  tls.crt: <some base64 encoded variable>
  tls.key: <some base64 encoded variable>