-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
OIDC-based auth for Doppler Provider #4352
Description
Is your feature request related to a problem? Please describe.
Using the Doppler provider requires that a static access token be generated and kept in the cluster to authorize the SecretStore to Doppler.
Describe the solution you'd like
Doppler now supports OIDC Service Account auth which would provide a significant improvement to secret access. So long as the k8s cluster has an OIDC provider enabled, it should be able to use a k8s ServiceAccount token to authenticate to Doppler as the configured doppler service-account.
Describe alternatives you've considered
Rotating access tokens, deploying them to cluster, and reflecting across required namespaces... this approach is complex, fragile, and less secure than identity-based access.
Additional context
Metadata
Metadata
Assignees
Labels
Type
Projects
Status