Skip to content

Allow the user to create it's own secrets #375

@IgnacioHeredia

Description

@IgnacioHeredia

We should allow the user to input/edit in the Dashboard some global secrets that would be available in all deployments.

Those secrets would be saved in a user-secrets folder in Vault.

Then when deploying a Nomad job, we can create a Nomad task that reads the secrets from Vault and saves them under /secrets/global.
(@Sftobias please take care of this)

In addition to user-secrets, we could also mount per-deployment secrets hosted in Vault path deployments/<deployment-uuid> and save them under /secrets/local.

The /secrets path in the deployment should be read-only, because any modification of the secrets won't be synced with Vault.

Metadata

Metadata

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions