posit-dev / posit-dev/team-operator
Support custom secrets per workload
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 10
- Forks
- 1
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 4
Description
Customers have a desire to maintain their own set of secrets in KeyVault and Secrets Manager to be injected as environment variables into sessions. We should support the ability to define these extra sets of secret values to retrieve and build custom SecretProviderClass instances in the operator to support this.
We already have the ability to inject secrets as session env vars via the sessionEnvVars field, we'll just need to get the secrets present in the cluster via a custom SPC.
Migrated from rstudio/ptd#2376
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing sessionEnvVars handling and the operator's SecretProviderClass creation path. Review how KeyVault and Secrets Manager values are represented in the cluster, then define custom secret sets and verify that their values are injected into sessions as environment variables.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100