Skip to content

[2] PushSecret: Platform Engineers can update secrets in a Secret Provider (GCP Secret Manager) #1094

@ladeoshodi

Description

@ladeoshodi

Epic: #976

Acceptance Criteria

Scenario: A platform engineer can update secrets in GCP Secret Manager
Given a platform engineer is syncing secrets from GCP Secret Manager
When a secret is updated in the k8s cluster
And the Update method to sync secrets to GCP Secret Manager is enabled
Then the platform engineer is able to update secrets in GCP Secret Manager

Notes

  • ps: SecretSink should only be able to override a secret in a Secret Provider if
    • the secret did not exist before (IfNotExists) or
    • the secret was created by the k8s cluster via ESO SecretSink
  • Suggestion to use "Tags" to indicate that a Secret was created by SecretSink

Metadata

Metadata

Labels

StaleThis issue/Pull Request is stale and will be automatically closed

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions