search

hashicorp / vault-csi-provider

HashiCorp Vault Provider for Secret Store CSI Driver
Other
314 stars 53 forks source link

Support secret templates in addition to raw secret values #91

Open thomas-riccardi opened 3 years ago

thomas-riccardi commented 3 years ago

The vault-agent-in-sidecar supports secret templates: https://www.vaultproject.io/docs/platform/k8s/injector#secret-templates

Are there plans to support it in this secrets csi provider? (it seems to be briefly mentioned in https://github.com/hashicorp/vault-csi-provider/pull/61#discussion_r568650698)

Thanks!

tomhjp commented 3 years ago

We don't have any firm timeline on this, but we have discussed this internally and want to add it. Thanks for raising it, it's really helpful to get an idea of our users' priorities!

wolffberg commented 2 years ago

Any update on this feature? It would free up a lot of resources used for sidecars across our clusters 💸

agates4 commented 2 years ago

Hey Tom (@tomhjp), any update on where this sits in priorities? Would be super helpful to make things even more secure (not hardcoding keys in our Github repo)

AdrienneCohea commented 1 year ago

I would love or this and the Vault Secrets Operator for Kubernetes to both have this feature. Basically any of the vault functions of consul-template should be valid in here.

There are many valid use cases for this. One that jumps readily to mind is creating a pgpass file.

michelbieleveld commented 1 month ago

I also still would love it in 2024 ;)