feat: add extra annotations to customize path of injected token and permissions of the token file sink on vault

hashicorp / vault-k8s

First-class support for Vault and Kubernetes.

Mozilla Public License 2.0

784 stars 171 forks source link

feat: add extra annotations to customize path of injected token and permissions of the token file sink on vault #650

Open srevinsaju opened 3 months ago

srevinsaju commented 3 months ago

adds:

vault.hashicorp.com/agent-inject-token-file to specify a different path other than ${vault_volume_name}/token
vault.hashicorp.com/agent-inject-token-perms to specify a different permission for the token file, other than the current default, 0640

dlitster commented 1 month ago

This would be great. Ran into some trouble with this issue using a distroless container this week. Is this linked to a feature request or github issue?

srevinsaju commented 1 month ago

nope, it’s currently not linked to a feature request/issue right now