Skip to content
This repository has been archived by the owner on Nov 28, 2022. It is now read-only.

Vault proxy mode #13

Conversation

asaintsever
Copy link
Contributor

@asaintsever asaintsever commented Dec 5, 2019

New feature: enable Vault proxy capabilities in injected Vault Agent sidecar.

Applications will be able to invoke any Vault API endpoint through this local proxy without having to deal with authentication and token.

Tasks:

  • Update documentation
  • Add new blog entry
  • Add new samples
  • Add new annotations to enable proxy mode and, as an option, provide custom proxy port

Proxy capability will be added as a new Vault Sidecar Injector mode. We will end up supporting two modes:

  • proxy, providing local proxy to Vault server
  • secrets, enabling dynamic and continuous retrieval of secrets

It will be possible to enable only one or both modes on a case by case basis for each mutated pod.

@asaintsever asaintsever added documentation Improvements or additions to documentation enhancement New feature or request labels Dec 5, 2019
@asaintsever asaintsever added this to the 5.0.0 milestone Dec 5, 2019
@asaintsever asaintsever self-assigned this Dec 5, 2019
@asaintsever asaintsever merged commit 66b5514 into master Dec 6, 2019
@asaintsever asaintsever deleted the asaintsever/feat/document_proxy_and_encryption_as_a_service branch December 6, 2019 14:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
documentation Improvements or additions to documentation enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant