KusionStack / KusionStack/kusion

Feat: Support SetSecret via secret store interface

Open
#1,411 0 comments 0 reactions 0 assignees View on GitHub
help wanted kind/feature
Dominant language
Go
Stars
1.3k
Forks
108
Avg merge
11m
Merged PRs (30d)
1

Description

### What would you like to be added?

Currently Kusion defines the secret store interface with only a `GetSecret()` method.
See: https://github.com/KusionStack/kusion/blob/main/pkg/secrets/interfaces.go

Add a `SetSecret()` method for the interface and support it in all implementations (aws/azure/gcp/alicloud/viettel).

### Why is this needed?

Writing a secret to a secret store may be used when:
- Storing sensitive information in variable sets
- Storing kubeconfig to be used by the Kubernetes runtime (#1409)

### Tasks

- [x] Add interface of GetSecret #1433
- [ ] Implement GetSecret in Alicloud Secretmanager
- [ ] Implement GetSecret in AWS Secretmanager
- [ ] Implement GetSecret in Azure SecretManager
- [ ] Implement GetSecret in Hashicorp Vault SecretManager
- [ ] Implement GetSecret in Viettelcloud Secretmanager

Contributor guide

Open the contributing guide

Research direction

Start with pkg/secrets/interfaces.go to confirm the requested SetSecret contract, then locate the secret-manager implementations for Alicloud, AWS, Azure, Hashicorp Vault, and Viettelcloud. Done means the interface and every listed implementation support SetSecret consistently; the task checklist should be reconciled with the issue title.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, gcp, go
Domain
backend, cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.