Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Authenticate with Vault using Kubernetes service accounts #176

Open
gnarea opened this issue Jan 24, 2020 · 2 comments
Open

Authenticate with Vault using Kubernetes service accounts #176

gnarea opened this issue Jan 24, 2020 · 2 comments
Labels
adapter-vault HashiCorp Vault enhancement New feature or request

Comments

@gnarea
Copy link
Member

gnarea commented Jan 24, 2020 •
edited

Instead of using the initial root token. See: https://www.vaultproject.io/docs/auth/kubernetes/

This will require changing keystore-vault to renew the token periodically: https://www.vaultproject.io/api-docs/auth/token#renew-a-token
@gnarea gnarea transferred this issue from relaycorp/relaynet-pong-chart Feb 27, 2020
@gnarea gnarea transferred this issue from relaycorp/awala-keystore-vault-js Nov 28, 2020
@gnarea gnarea changed the title Drop token-based authentication with Vault Authenticate with Vault using Kubernetes service accounts Nov 28, 2020
gnarea referenced this issue in relaycorp/cloud-gateway Nov 28, 2020
@gnarea
Vault: Create secret for initial root token
034d021 
As a workaround until #9 is done
@gnarea gnarea added the enhancement New feature or request label Nov 28, 2020
@gnarea gnarea transferred this issue from relaycorp/cloud-gateway Jul 9, 2022
@gnarea gnarea transferred this issue from relaycorp/awala-keystore-cloud-js Mar 22, 2023
@gnarea gnarea transferred this issue from relaycorp/webcrypto-kms-js Apr 4, 2023
@gnarea
Copy link
Member Author

gnarea commented Apr 4, 2023

See #177

@gnarea gnarea closed this as not planned Won't fix, can't repro, duplicate, stale Apr 4, 2023
@gnarea
Copy link
Member Author

gnarea commented Apr 4, 2023

Actually, we still need Vault for session keys.

@gnarea gnarea reopened this Apr 4, 2023
@gnarea gnarea added the adapter-vault HashiCorp Vault label Apr 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
adapter-vault HashiCorp Vault enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@gnarea