-
Notifications
You must be signed in to change notification settings - Fork 10
External secrets #323
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
External secrets #323
Conversation
- Added pages to index.md and mkdocs.yml - Updated for plain language and active voice @IanKWatts - In visual studio code the system is letting me know that Fenced code blocks should have language specified and provides this link: https://github.com/DavidAnson/markdownlint/blob/v0.37.4/doc/md040.md I am unsure how this affects the code blocks.
|
||
ESO's main purpose to keep your Kubernetes Secrets in sync with external APIs. It uses custom resources `ExternalSecret` and `SecretStore` to provide a user-friendly abstraction for the external API that stores and manages the lifecycle of the secrets for you. | ||
|
||
You install ESO in each cluster. It's **self-serve**, so you can: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do you mean "we installed ESO in each cluster, so you can self-serve"?
A STRA for Vault has been completed by the Platform Services team. | ||
|
||
## Alternatives | ||
If you would prefer to use a different secrets management system, you may use the External Secrets Operator to link your OpenShift namespace to an external service, such as AWS Secrets Manager or Azure Key Vault. See the [External Secrets Operator documentation](external-secrets.md) for more information. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
maybe also mention that Openshift secure is now encrypted, so it's okay to use Openshift secret objects
|
||
We recommend running the Azure CLI in a Docker or Podman container. Installing the CLI directly on your machine requires many dependencies, which might conflict with other tools or take up unnecessary space if you only need it for this task. | ||
|
||
Make sure you have a running Docker ir Podman environment before starting. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Make sure you have a running Docker ir Podman environment before starting. | |
Make sure you have a running Docker or Podman environment before starting. |
Add documentation for the External Secrets Operator to the 'Secrets management' section.