unkin/artifactapi
2
0
Fork 0
Code Issues 5 Pull Requests 2 Actions Packages Projects Releases 1 Wiki Activity

Secrets in config #21

New Issue
Open
opened 2026-04-28 08:15:45 +10:00 by unkinben · 0 comments
unkinben commented 2026-04-28 08:15:45 +10:00
Owner
Copy Link
Copy Source

Some remotes require secrets in the config yaml file. These secrets should be read from Kubernetes secrets or directly from vault.

Best option (support multiple maybe) would be to use the Kubernetes service account jwt to mint a token and read all secrets it needs into memory. We would need a way to put the vault path, or Kubernetes secret path, into a string in the username/password fields (and others).

Some remotes require secrets in the config yaml file. These secrets should be read from Kubernetes secrets or directly from vault. Best option (support multiple maybe) would be to use the Kubernetes service account jwt to mint a token and read all secrets it needs into memory. We would need a way to put the vault path, or Kubernetes secret path, into a string in the username/password fields (and others).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/artifactapi#21
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?