Support generating secrets without a data section in Helm charts #45140
Labels
area:helm-chart
Airflow Helm Chart
area:secrets
kind:feature
Feature Requests
needs-triage
label for new issues that we didn't triage yet
Comments
andrii-korotkov-verkada
added
kind:feature
andrii-korotkov-verkada
added a commit
to andrii-korotkov-verkada/airflow
that referenced
this issue
Dec 22, 2024
Sometimes you don't want to include secret data in Git manifest for security reasons, e.g. when storing manifests in Git and deploying with ArgoCD. However, you may still want to generate a secret itself and then edit it's data section later, e.g. manually with kubectl. Provide more options of generating the secret while keeping backwards compatibility. Helps with: apache#45140 Signed-off-by: Andrii Korotkov <[email protected]>
andrii-korotkov-verkada
added a commit
to andrii-korotkov-verkada/airflow
that referenced
this issue
Dec 22, 2024
Sometimes you don't want to include secret data in Git manifest for security reasons, e.g. when storing manifests in Git and deploying with ArgoCD. However, you may still want to generate a secret itself and then edit it's data section later, e.g. manually with kubectl. Provide more options of generating the secret while keeping backwards compatibility. related: apache#45140 Signed-off-by: Andrii Korotkov <[email protected]>
andrii-korotkov-verkada
added a commit
to andrii-korotkov-verkada/airflow
that referenced
this issue
Dec 22, 2024
Sometimes you don't want to include secret data in Git manifest for security reasons, e.g. when storing manifests in Git and deploying with ArgoCD. However, you may still want to generate a secret itself and then edit it's data section later, e.g. manually with kubectl. Provide more options of generating the secret while keeping backwards compatibility. related: apache#45140 Signed-off-by: Andrii Korotkov <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
Currently the secrets are either not included or included with a non-empty data section with some secret values. It'd be great to have an option to generate secrets but without any secret data included (e.g. to be deployed with ArgoCD).
Use case/motivation
The motivation is security - secrets shouldn't be committed to the repository which is used to manage ArgoCD manifests.
Related issues
No response
Are you willing to submit a PR?
Code of Conduct
The text was updated successfully, but these errors were encountered: