line / centraldogma

Highly-available version-controlled service configuration repository based on Git, ZooKeeper and HTTP/2
https://line.github.io/centraldogma/
Apache License 2.0
599 stars 117 forks source link

Support OAuth Token for Kubernetes Authentication via Credential Service #1038

Open minwoox opened 6 days ago

minwoox commented 6 days ago

Motivation: The current approach stores the Kubernetes oauthToken in the Kubernetes configuration, which is not ideal for sensitive information. To improve security, we need a way to specify and manage the oauthToken through the credential service, allowing it to be securely retrieved and used by the Kubernetes service.

Modifications:

Result:

jrhee17 commented 6 days ago

Let me wait until this is rebased over https://github.com/line/centraldogma/pull/1031 since it is difficult to review the changes related to OAuth Token.

minwoox commented 6 days ago

Let me wait until this is rebased over https://github.com/line/centraldogma/pull/1031 since it is difficult to review the changes related to OAuth Token.

Yeah, let me ping you when it's ready. 😉

minwoox commented 5 days ago

@jrhee17, @ikhoon this is now ready. 😉