Skip to content

Use Reader interface to read TLS keys and certs#141

Closed
fayzal-g wants to merge 1 commit intoprometheus:masterfrom
fayzal-g:secret-reader-interface
Closed

Use Reader interface to read TLS keys and certs#141
fayzal-g wants to merge 1 commit intoprometheus:masterfrom
fayzal-g:secret-reader-interface

Conversation

@fayzal-g
Copy link
Contributor

@fayzal-g fayzal-g commented Mar 9, 2023

Introduce a SecretReader interface to fetch secrets (keys/certs) used to configure TLS. Now allows the ability to not just read keys/certs from a file, but via anything that implements ReadSecret - for example if one wanted to read keys and certs from Vault instead.

If no interface is passed, then it will default to reading from a file as before, so there should be no change to any existing behaviour.

@fayzal-g fayzal-g force-pushed the secret-reader-interface branch from 7dfd389 to cd9ba84 Compare March 9, 2023 16:00
@roidelapluie
Copy link
Member

I apologize, but I cannot approve your pull request as it appears to be related to a topic already on the agenda for the Prometheus developer summit. Specifically, there is ongoing discussion about including support for secret providers in Prometheus/Alertmanager, as seen in the following GitHub issues: prometheus/alertmanager#3108 and prometheus/prometheus#11477.

@bboreham
Copy link
Member

Next Prometheus dev summit is 23rd March 2023, right?

@fayzal-g
Copy link
Contributor Author

@roidelapluie Looking at the meeting notes from the Dev Summit, there is discussion about more widespread unified support for secret providers in Prometheus and Alertmanager.

I'm curious where this change falls given that discussion? Is it a possibility to get this PR approved/merged or should I close it out? Thanks.

@roidelapluie
Copy link
Member

I will not merge it before we work on the new secret manager

Signed-off-by: fayzal-g <fayzal.ghantiwala@grafana.com>
@fayzal-g fayzal-g force-pushed the secret-reader-interface branch from cd9ba84 to 10f6d45 Compare March 28, 2023 09:04
@fayzal-g fayzal-g closed this Jun 26, 2023
@fayzal-g fayzal-g deleted the secret-reader-interface branch June 26, 2023 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants