search

bank-vaults / vault-secrets-reloader

A Kubernetes Controller that reloads workloads on a referenced secret change in HashiCorp Vault
Apache License 2.0
20 stars 3 forks source link

Make reloading to be triggerable from outside #37

Open akijakya opened 1 year ago

akijakya commented 1 year ago

It would be nice to be able to not only run the reloader worker when it is scheduled by configuration, but on other events as well, like after secret-sync synced some new secrets into the local Vault, or by an ops team member manually after they changed a secret etc.

ramizpolic commented 1 year ago

We could use CRs to trigger a refresh request and update the CR with details about reloading. The CR could have 4 potential states Created/Empty, InProgress, Succeeded, Failed. However, I would wait out for more feature requests before working on this as in our current use-cases we only need to have reloading capabilities present (rather than enforcing/checking refreshes)