Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option for using K8s secrets resources to KBS #7

Merged
merged 3 commits into from
Mar 6, 2024

Conversation

bpradipt
Copy link
Member

@bpradipt bpradipt commented Mar 1, 2024

This PR allows configuring K8s secrets as KBS resources

@lmilleri
Copy link
Member

lmilleri commented Mar 1, 2024

Can you please add a short section in the README about how to add the resources?

README.md Show resolved Hide resolved
controllers/kbsconfig_controller.go Outdated Show resolved Hide resolved
bpradipt added 2 commits March 6, 2024 17:22
KbsSecretResources entry in the CRD allows to specify the K8s
secrets that needs to be made available to the KBS clients.
Each secret name is mounted as follows:

/opt/confidential-containers/kbs/repository/default/<secret-name-1>/key1
/opt/confidential-containers/kbs/repository/default/<secret-name-1>/key2
/opt/confidential-containers/kbs/repository/default/<secret-name-2>/key1

Signed-off-by: Pradipta Banerjee <[email protected]>
Using single method to handle volumeMount object creation under
specific directories

Signed-off-by: Pradipta Banerjee <[email protected]>
@lmilleri
Copy link
Member

lmilleri commented Mar 6, 2024

Thx, it looks good to me

@bpradipt bpradipt merged commit 5c3e111 into confidential-containers:main Mar 6, 2024
3 checks passed
@bpradipt bpradipt deleted the secret-res branch March 6, 2024 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants