ondat / trousseau

Store and access your secrets the Kubernetes native way with any external KMS.
https://trousseau.io
Apache License 2.0
178 stars 11 forks source link

[RFE] KMS provider code to be running as a sidecars #103

Closed romdalf closed 2 years ago

romdalf commented 2 years ago

Is it linked to a user story? (use the "#" to tag the user story)

50 - Result of Design meeting held on June 9th 2022 with @cvlc @mhmxs @vfiftyfive @rovandep

What do we want to build?

Dynamic KMS Plugin attachment using a sidecar approach.

Why do we want to build it?

Provide flexibility to introduce new KMS providers even with a running instance of Trousseau.

How do we want to design it?

Decoupled Trousseau's KMS provider code into separate independent binary to run as a sidecar. Each KMS provider sidecar will have its own dedicated unix socket file.