hashicorp / hashicorp/vault-secrets-operator

VaultStaticSecret merge secrets from multiple path to one kubernetes secret

Open
#954 3 comments 9 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
601
Forks
145
Avg merge
3d 8h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
We have one shared secret path for all services. And per service also has its specific secret path.

Could we use one VaultStaticSecret to merge multiple path into one Kubernetes secret?
**As below at` path`, instead one path, it accepts a list of paths**

```
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
namespace: app
name: app1-static-secret
spec:
namespace: application
mount: secret
type: kv-v2
path:
- app1/shared-secrets
- app1/specific-secrets
refreshAfter: 60s
destination:
create: true
name: app-secret
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the VaultStaticSecret specification and reconciliation flow, focusing on how the path and destination fields are handled. Check the existing Kubernetes Secret behavior and related tests, then define how multiple Vault paths are combined and how conflicting keys are resolved. Done means one VaultStaticSecret can merge the requested paths into the named Kubernetes Secret with documented, tested behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.