search

square / keywhiz

A system for distributing and managing secrets
https://square.github.io/keywhiz/
Apache License 2.0
2.62k stars 216 forks source link

Is it possible to create a secret only using keywhiz api #118

Closed hshyamh4 closed 9 years ago

hshyamh4 commented 9 years ago

As per #82, To consume a service /secret/{secretName}, It should have client and groups, I do not want to create groups and clients. Even i can consume service /secret/{id} without having groups and clients to that secret.

Like wise,I just want to create secret and consume it by /secret/{secretName}.

sul3n3t commented 9 years ago

When a client and a secret share at least one common group, that is what authorizes the client to access a secret. Secrets and clients can exist in Keywhiz without group assignments, but the client will not be able to access the secret. If that were allowed, there would be no access control between different clients.