hashicorp / hashicorp/vault-secrets-operator

Lazy Load Secrets

Open
#342 0 comments 3 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
600
Forks
146
Avg merge
3d 8h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
Vault Secret Operator pulls and refreshes secrets that are not even being used. This is especially a problem with Jobs/CronJobs, as the Kubernetes Secrets do not need to always be present. Additionally it is wasteful as it will continually refresh credentials+secrets we do not need.

**Describe the solution you'd like**
Allow definitions of VaultPKISecret, VaultStaticSecret, VaultDynamicSecret to be lazily loaded. This will match the Vault CSI Provider's implementation which only pulls a Vault Secrets into a Kubernetes Secret on demand, and cleans it up when the volume is no longer mounted.

**Describe alternatives you've considered**
The Vault CSI Provider allows follows this behavior, however I would like to migrate from CSI Provider to VSO. Vault webhook injector does not allow spooling Vault Secrets to Kubernetes Secrets.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.