ondat / trousseau

Store and access your secrets the Kubernetes native way with any external KMS.

https://trousseau.io

Apache License 2.0

177 stars 11 forks source link

[TRACK] multi KMS encryption provider support within Kubernetes API server #146

Open romdalf opened 2 years ago

romdalf commented 2 years ago

Is it linked to a user story? (use the "#" to tag the user story)

112

What do we want to build?

Kubernetes API secret annotation capabilities to target one or multiple providers.

Why do we want to build it?

Trousseau v2 will multi kms support but the actual Kubernetes KMS encryption providers is not supporting the logic of targeting a specific provider entry from EncryptionConfiguration.

How do we want to design it?

See https://github.com/kubernetes/kubernetes/issues/111405

romdalf commented 2 years ago

note: the issue has been shared on the relevant sig Kubernetes slack channel with a first ack and discussion about this proposal.