Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PublishConnectionDetailsTo #109

Open
mateusz-lubanski-sinch opened this issue Oct 26, 2022 · 2 comments
Open

PublishConnectionDetailsTo #109

mateusz-lubanski-sinch opened this issue Oct 26, 2022 · 2 comments
Labels
enhancement New feature or request

Comments

@mateusz-lubanski-sinch
Copy link

What problem are you facing?

On AWS Provider we can find that connection secrets are exposed by two ways:

  • writeConnectionSecretToRef - documentation says that this field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo
  • PublishConnectionDetailsTo - design-doc-external-secret-stores.md design document was recently accepted and crossplane stated that this is the way forward

We just started using crossplane in our company and some teams would like to store secrets in AWS SecretManager and/or Vault. This is not possible with writeConnectionSecretToRef

How could Crossplane help solve your problem?

By implementing PublishConnectionDetailsTo in provider-sql

@mateusz-lubanski-sinch mateusz-lubanski-sinch added the enhancement New feature or request label Oct 26, 2022
@chlunde
Copy link
Contributor

chlunde commented Nov 9, 2022

Depends on #116

See also #113

@mateusz-lubanski-sinch
Copy link
Author

@chlunde upgraded to v0.6.0 and when I set User.spec.publishConnectionDetailsTo I get below warning

Warning  CannotPublishConnectionDetails  8s (x17 over 5m49s)  managed/user.mysql.sql.crossplane.io  cannot publish to secret store, feature is not enabled

I tried add - --enable-external-secret-stores argument on ControllerConfig for provider-sql but it is not supported

Do you have any tips how I can enable this feature on provider-sql?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants