locmai / secret-generator-rs Goto Github PK

Currently, the controller just reconciles SecretGenerator into Kubernetes secret, we will need to:

• Add the spec for Vault client (auth with root token or service account)
• Initialize the Vault client
• Split the reconcile handler to handle multiple cases (kubernetes, vault and more)

The current libraries don't seem very promising though:

• https://github.com/lawliet89/vault-rs (+1)
• https://github.com/Metaswitch/vault-client
• https://github.com/ChrisMacNaughton/vault-rs

Either add a placeholder to this list or get rid of it when generate the CRD

Currently, when update an existed SecretGenerator spec, the controller didn't update the new keys :'(

Secrets like database password with @ will cause some issue. Provide the ability to exclude/include them.