fluent / fluent/helm-charts

[fluent-bit] Load configuration from either ConfigMap or Secret

Open
#748 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go Template
Stars
473
Forks
497
Avg merge
22h 8m
Merged PRs (30d)
3

Description

Currently it is not possible to load the configuration of input and/or output to come from a `Secret`. There are cases where passwords or connection string are used and they will then be saved as a `ConfigMap` which is not really ideal. Additionally if it becomes possible to provide `existingSecret`, it would be possible to get the secret from an external source, e.g. a Vault via VSO.

Currently I've edited my personal chart to just use a `Secret`, but I can take over this issue if triaged and make it personalized.

I would say similarly to `kind`, `configKind` can be added to be set as either `ConfigMap` or `Sercret`, defaulting to `ConfigMap` to prevent huge breaking changes. Then either a `ConfigMap` or `Secret` is created, with the possibility to provide a `existingSecret` as well.

Contributor guide

Open the contributing guide

Research direction

Inspect the fluent-bit chart's values and resource templates, starting with how the current configuration kind is selected and how ConfigMaps are created. The work is done when configuration can use either a ConfigMap or Secret, an existing Secret can be referenced, and the default remains ConfigMap without breaking current users.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm
Domain
devops
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.