Ability to set static secrets under secretObjects #1342
Description
Describe the solution you'd like
Some tools rely on synced Kubernetes secrets which may contain fields which do not make sense to be stored within Azure Key Vault, e.g. some Argo CD repository settings.
Anything else you would like to add:
I've seen multiple requests for such feature, even PRs but they never end up being released.
Related issues: kubernetes-sigs/secrets-store-csi-driver#938 , kubernetes-sigs/secrets-store-csi-driver#948 , kubernetes-sigs/secrets-store-csi-driver#1153
GCP PR: GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp#174
SCSI Community meeting notes of May 26, 2022:
Ability to set static secrets under secretObjects
- This can be a feature request in the provider to set static values
- Provider needs to return the file as part of the grpc response
- Sync secret relies on the files in the mount, so it’ll work with any changes in driver
Environment:
- Secrets Store CSI Driver version: (use the image tag): latest
- Azure Key Vault provider version: (use the image tag): latest
- Kubernetes version: (use
kubectl version): 1.26.x - Cluster type: (e.g. AKS, aks-engine, etc): AKS