You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The secretGenerator.commands field was replaced by a new DataSource abstraction in v2.0.3 (#703).
The commands field provided secret hydration via shell commands, which was useful for fetching secrets from an arbitrary source (e.g., a hosted secret store).
The new DataSource mechanism only seems to support sourcing secrets stored in files. This approach is arguably simpler, but requires secrets be present on the file system, which is limiting from an administrative perspective.
I propose a shell-based DataSource implementation be provided to support the old style of command-sourced secrets.
The text was updated successfully, but these errors were encountered:
The
secretGenerator.commands
field was replaced by a newDataSource
abstraction inv2.0.3
(#703).The
commands
field provided secret hydration via shell commands, which was useful for fetching secrets from an arbitrary source (e.g., a hosted secret store).The new
DataSource
mechanism only seems to support sourcing secrets stored in files. This approach is arguably simpler, but requires secrets be present on the file system, which is limiting from an administrative perspective.I propose a shell-based
DataSource
implementation be provided to support the old style ofcommand
-sourced secrets.The text was updated successfully, but these errors were encountered: