DiamondLightSource / DiamondLightSource/mx-bluesky
Discuss migration of ispyb, zocalo credentials files to k8s-compatible secrets with analysis
- Dominant language
- Python
- Stars
- 4
- Forks
- 5
- Avg merge
- 1d 30m
- Merged PRs (30d)
- 2
Description
Currently we have dependencies on credentials files for ispyb and zocalo. These files are for our purposes opaque blobs that we pass to the `ispyb-api` and `zocalo` libraries, that contain a bunch of configuration as well as various credentials and may even refer to other files.
The way they are used effectively forces us to mount these directly in to the container with bind mounts, however the more proper way would be to use the secrets functionality, but this would require us to ideally have more bite-sized pieces of data.
We should discuss with the team what their plans are wrt. containerisation and migration of secrets.
Contributor guide
Assessment
This issue has not been assessed yet.