DiamondLightSource / DiamondLightSource/mx-bluesky

Discuss migration of ispyb, zocalo credentials files to k8s-compatible secrets with analysis

Open
#443 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
4
Forks
5
Avg merge
1d 30m
Merged PRs (30d)
2

Description

Currently we have dependencies on credentials files for ispyb and zocalo. These files are for our purposes opaque blobs that we pass to the `ispyb-api` and `zocalo` libraries, that contain a bunch of configuration as well as various credentials and may even refer to other files.

The way they are used effectively forces us to mount these directly in to the container with bind mounts, however the more proper way would be to use the secrets functionality, but this would require us to ideally have more bite-sized pieces of data.

We should discuss with the team what their plans are wrt. containerisation and migration of secrets.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.