KusionStack / KusionStack/kusion
Feat: Support SetSecret via secret store interface
- Dominant language
- Go
- Stars
- 1.3k
- Forks
- 108
- Avg merge
- 11m
- Merged PRs (30d)
- 1
Description
### What would you like to be added?
Currently Kusion defines the secret store interface with only a `GetSecret()` method.
See: https://github.com/KusionStack/kusion/blob/main/pkg/secrets/interfaces.go
Add a `SetSecret()` method for the interface and support it in all implementations (aws/azure/gcp/alicloud/viettel).
### Why is this needed?
Writing a secret to a secret store may be used when:
- Storing sensitive information in variable sets
- Storing kubeconfig to be used by the Kubernetes runtime (#1409)
### Tasks
- [x] Add interface of GetSecret #1433
- [ ] Implement GetSecret in Alicloud Secretmanager
- [ ] Implement GetSecret in AWS Secretmanager
- [ ] Implement GetSecret in Azure SecretManager
- [ ] Implement GetSecret in Hashicorp Vault SecretManager
- [ ] Implement GetSecret in Viettelcloud Secretmanager
Contributor guide
Research direction
Start with pkg/secrets/interfaces.go to confirm the requested SetSecret contract, then locate the secret-manager implementations for Alicloud, AWS, Azure, Hashicorp Vault, and Viettelcloud. Done means the interface and every listed implementation support SetSecret consistently; the task checklist should be reconciled with the issue title.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, azure, gcp, go
- Domain
- backend, cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100