vmware-tanzu / secrets-manager

VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/
https://vsecm.com/
BSD 2-Clause "Simplified" License
156 stars 25 forks source link

[security] Move SPIRE Server Into its Own Namespace #992

Closed v0lkan closed 3 months ago

v0lkan commented 3 months ago

Move SPIRE Server to Its Own Namespace

Description

This PR moves SPIRE server into its own namespace for better isolation and security.

There are additional changes too that I’ll annotate in the code review comments.

Changes

Test Policy Compliance

Code Quality

Documentation

Additional Comments

Include any additional comments or context about the PR here.

Checklist

Before you submit this PR, please make sure:

By submitting this pull request, you confirm that my contribution is made under the terms of the project's license and that you have the authority to grant these rights.


Thank you for your contribution to VMware Secrets Manager 🐢⚡️!

v0lkan commented 3 months ago

@BulldromeQ » This aligns better with RIC OpenShift deployment, where SPIRE Server is in its own namespace.

And it is better security regardless.