kubernetes-vault | Use Vault to store secrets for Kubernetes | Identity Management library

by Boostport Go Version: Current License: Apache-2.0

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | kubernetes-vault Summary

kubernetes-vault is a Go library typically used in Security, Identity Management applications. kubernetes-vault has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

The Kubernetes-Vault project allows pods to automatically receive a Vault token using Vault's AppRole auth backend.

Support

Quality

Security

License

Reuse

Support

kubernetes-vault has a medium active ecosystem.

It has 963 star(s) with 136 fork(s). There are 36 watchers for this library.

It had no major release in the last 6 months.

There are 0 open issues and 81 have been closed. On average issues are closed in 260 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of kubernetes-vault is current.

Quality

kubernetes-vault has no bugs reported.

Security

kubernetes-vault has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

kubernetes-vault is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

kubernetes-vault releases are not available. You will need to build from source code and install.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of kubernetes-vault

Get all kandi verified functions for this library.

kubernetes-vault Key Features

No Key Features are available at this moment for kubernetes-vault.

kubernetes-vault Examples and Code Snippets

No Code Snippets are available at this moment for kubernetes-vault.

Community Discussions

Trending Discussions on kubernetes-vault

Why does the kubernetes-vault init container need to unwrap the secret id supplied by the controller?

QUESTION

Why does the kubernetes-vault init container need to unwrap the secret id supplied by the controller?

Asked 2018-Dec-16 at 16:41

In the diagram on the kubernetes-vault repo, you can see that the init container takes the wrapped secret_id and the unwraps and redeems the secret_id for a token via Vault. Why doesn't the kubernetes-vault controller do this unwrapping and redemption itself and simply transmit the token to the init container?

https://github.com/Boostport/kubernetes-vault/raw/master/flow-diagram.png

...

ANSWER

Answered 2017-Nov-21 at 03:08

Note: The kubernetes-vault project is an open-source project maintained by my company.

The reason the init container unwraps the secret is 2 fold:

Only the init container and the pod it is in is able to see the final secret. That means that the kubernetes-vault controller does not know what the token is and is not able to use it for malicious purposes if compromised.
If a someone intercepts the wrapped token and unwraps it, the init container would not be able to unwrap the token and this is a good signal that cluster has been compromised. If the unwrapped token is sent to the init container, it can be intercepted and it would not be possible to alert on this.

Source https://stackoverflow.com/questions/46979823

Community Discussions, Code Snippets contain sources that include Stack Exchange Network