maxisam / mgob

MongoDB dockerized backup agent. Runs schedule backups with retention, S3 & SFTP upload, notifications, instrumentation with Prometheus and more.

https://maxisam.github.io/mgob/

MIT License

123 stars 16 forks source link

how to store passwords securely #68

Closed RLutsch closed 9 months ago

RLutsch commented 10 months ago

the helm chart does not support mounting secrets as env making it hard to manage secrets securely:

Let env allow valueFrom option Allow more custom detail in the secret option

This will allow secrets to be pulled cross namespace using replicator then mounted as env without having to put the secret in the configmap.

happy to do the pr what the process?

maxisam commented 10 months ago

just submit the PR. I will review it and merge it thx!

maxisam commented 10 months ago

80 should help

dmutterSF commented 9 months ago

Don't know if this is related but I have the plans stored as secrets and don't know how to get mgob to pick them up. I load the secrets into the container with mountSecrets but mgob only checks the /config directory. I then tried setting the envVar ConfigPath to "/secrets/secretname" but that still gave me the same error message. What am I doing wrong?

Using HelmChart version 1.8.3 and image tag 2.0.18-all

maxisam commented 9 months ago

@dmutterSF in Readme

Load config from environment variables to override config file. syntax: PLAN-ID_KEY_PROPERTY (e.g. mongo-?test_SMTP_SERVER=smtp.company.com)

so you can put your credential in the secret and put your plan in the config now.