subspace / infra

7 stars 4 forks source link

Mechanism to mount secrets in kubernetes from Vault KMS #316

Open DaMandal0rian opened 1 month ago

DaMandal0rian commented 1 month ago
  1. Need to add secrets configs since sensitive info can't be used in configmaps, will look at how to have this injected from Vault. Likely solution i will use is https://github.com/kubernetes-sigs/secrets-store-csi-driver which gets the secrets from vault and mounts it as a CSI volume.

  2. Then i will add the secrets config to the statefulset manifests