Open
Description
We should allow the user to input/edit in the Dashboard some global secrets that would be available in all deployments.
Those secrets would be saved in a user-secrets
folder in Vault.
Then when deploying a Nomad job, we can create a Nomad task that reads the secrets from Vault and saves them under /secrets/global
.
(@Sftobias please take care of this)
In addition to user-secrets
, we could also mount per-deployment secrets hosted in Vault path deployments/<deployment-uuid>
and save them under /secrets/local
.
The /secrets
path in the deployment should be read-only, because any modification of the secrets won't be synced with Vault.