search

mittwald / kubernetes-secret-generator

Kubernetes controller for automatically generating and updating secrets
Apache License 2.0
329 stars 56 forks source link

Option to exclude characters from generated secrets #72

Closed franroa closed 2 years ago

franroa commented 2 years ago

Is your feature request related to a problem? Please describe. AWS RDS passwords don't allow some special characters. The secrets generator often creates a slash in the secret of type string, and this is not being taken for RDS. As the documentation states: Constraints: At least 8 printable ASCII characters. Can't contain any of the following: / (slash), '(single quote), "(double quote) and @ (at sign).

Describe the solution you'd like Option to create just alphanumeric secrets where you can define which characters you want to omit

Thank you in advance!

aiceball commented 2 years ago

Have you tried using the base64url encoding? I've had a similar problem, where slashes were quite often in the generated secrets if I were to use base64 (default) encoding. Switching to base64url explicitly has eliminated this issue for me

franroa commented 2 years ago

Thank you for the tip, I will try it

franroa commented 2 years ago

I worked, thanks!

angelo291196 commented 6 months ago

I think this issue should be reopened. It would make sense to have the possibility to generate secrets with only a subset of characters.