OT-CONTAINER-KIT
/
k8s-secret-injector
mirror of https://github.com/OT-CONTAINER-KIT/k8s-secret-injector.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
k8s-secret-injector is a tool that can connect with multiple secret managers to fetch the secrets
42 Commits 1 Branch 4 Tags 242 KiB
Go 95.4%
Shell 2.5%
Makefile 1.2%
Dockerfile 0.9%
Go to file
Abhishek Dubey 023395152f
[Feature][Change] Replaced pipeline with Azure template (#6) 
* Replace pipeline with azure devops template

Signed-off-by: iamabhishek-dubey <abhishekbhardwaj510@gmail.com>
 		2021-05-19 18:04:30 +05:30
.azure-pipeline [Feature][Change] Replaced pipeline with Azure template (#6) 2021-05-19 18:04:30 +05:30
.goreleaser Added goreleaser config 2021-04-10 22:40:31 +05:30
cmd [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
pkg [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
scripts Added Azure DevOps CI pipeline 2021-05-15 17:28:09 +05:30
static Updated architecture diagram 2021-04-10 22:52:09 +05:30
.gitignore Added Azure DevOps CI pipeline 2021-05-15 17:36:15 +05:30
CHANGELOG.md [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
DEVELOPMENT.md Added CHANGELOG and DEVELOPMENT md 2021-04-10 22:33:11 +05:30
Dockerfile Added dockerfile for k8s-secret-injector 2021-04-10 21:45:31 +05:30
LICENSE Added LICENSE 2021-04-10 16:59:36 +00:00
Makefile [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
README.md [Feature][Add] Added Azure support to injector (#2) 2021-05-09 18:04:07 +05:30
VERSION [Feature][Add] Added Azure DevOps CI/CD pipeline (#5) 2021-05-15 17:07:11 +05:30
go.mod [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
go.sum [Feature][Add] Added GCP backend support (#3) 2021-05-15 10:40:28 +05:30
main.go Added initial code for k8s-secret-injector 2021-04-10 21:37:33 +05:30

README.md

K8s Secret Injector

k8s-secret-injector is a tool that can connect with multiple secret managers to fetch the secrets and then inject them into the environment variable in a secure way. The motive is to create this injector is to use it with another project of our k8s-vault-webhook but this can be used independently outside Kubernetes as well.

The secret managers which are currently supported:-

There are some secret managers which are planned to be implemented in future.

Supported Features

  • k8s-secret-injector can connect with Vault using Kubernetes as backend
  • Authenticate with Kubernetes using Serviceaccount mechanism
  • Support AWS Secret Manager as secret manager backend
  • Inject secrets directly to the process, i.e. after the injection you cannot read secrets from the environment variable
  • Inject secret to pod's application process from AWS Secret Manager

Architecture

Installation

We can simply clone the repo and compile the binary according to the OS architecture and environment.

make build-code

In any case, if you don't want to compile the code. The binary can be installed by downloading from Releases as well.

Usage

For using the k8s-secret-injector, simple --help flag can list out all the available options. For example:-

$ k8s-secret-injector --help
K8s Secret Injector Version: 1.0

A tool which can connect with multiple secret manager and inject them in environment variable

Usage:
  k8s-secret-injector [command]

Available Commands:
  aws         Fetch secrets from AWS Secret Manager
  azure       Fetch secrets from Azure Key Vault
  help        Help about any command
  vault       Fetch and inject secrets from Vault to a given command
  version     Print the version of k8s secret injector

Flags:
      --config string      config file (default is $HOME/.k8s-injector.yaml)
  -h, --help               help for k8s-secret-injector
  -t, --toggle             Help message for toggle
  -v, --verbosity string   Log level (debug, info, warn, error, fatal, panic (default "info")

Use "k8s-secret-injector [command] --help" for more information about a command.

Development

If you like to contribute to this project, you are more than welcome. Please see our DEVELOPMENT.md for details.

Release History

Please see our CHNANGELOG.md for details.

Contact

If you have any suggestion or query. Contact us at

opensource@opstree.com