Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSI should convert keyvault file with required extension and keep on container after mounting #1387

Open
swati-delphix opened this issue Dec 4, 2023 · 1 comment
Labels
enhancement New feature or request

Comments

@swati-delphix
Copy link

swati-delphix commented Dec 4, 2023

Describe the solution you'd like
Right now, I have scenario where I have config file in keyvault which should be in json format and json file and should be placed in /etc directory with json extension.
But csi driver is copying file with same name on container which is exist on keyvault. In keyvault, we cannot save file with extension (.json, .pem, .txt), how we can save that file.

volumeMounts:
          - mountPath: /etc/datadog/synthetics-check-runner.json
            path: synthetics-check-runner.json
            name: worker-config
            readOnly: true
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          env:

      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      volumes:
      - name: worker-config
        csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: worker-config

I tried to use volumemount as well with subpath to test.json, but it is creating mount but as directory and my datadog synthetics check is not reading it and asking for private key etc.

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

Environment:

  • Secrets Store CSI Driver version: (v1.3.4):
  • Azure Key Vault provider version: (use the image tag): azure/secrets-store/provider-azure:v1.4.1
  • Kubernetes version: (use kubectl version): 1.25
  • Cluster type: (e.g. AKS, aks-engine, etc): aks
@swati-delphix swati-delphix added the enhancement New feature or request label Dec 4, 2023
@swati-delphix
Copy link
Author

Any update?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant