hashicorp / hashicorp/vault-secrets-operator

Support syncing of configmaps?

Open
#543 2 comments 6 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
600
Forks
146
Avg merge
3d 8h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**

Currently the vso crd is mainly used for syncing k8s secrets, but since this is a more k8s native flavored tool in hashicorp's tool box as compared to agent-inject and csi-mounts, would it be in scope to potentially to sync configmaps since configmaps which are almost as sensitive when compared to secrets?

**Describe the solution you'd like**

if we assume we already store configmaps in vault in a normal kv2 engine the vaultconfigmapspec could look like this:
```
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultConfigmap
metadata:
name: test-configmaps
namespace: default
spec:
destination:
create: true
name: test-configmaps
mount: configmaps
path: configmaps/test-configmaps
refreshAfter: 60s
type: kv-v2

```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the existing VSO CRD and its Kubernetes Secret syncing behavior, then compare that flow with the proposed VaultConfigmap specification and KV-v2 data source. Define the scope and design for creating and refreshing ConfigMaps, including the example destination and refreshAfter behavior; completion should include agreed implementation and validation requirements.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
devops, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.