Bug 1320719

Summary:	[RFE] Expose secret keys in environment variables
Product:	OpenShift Container Platform	Reporter:	Eric Rich <erich>
Component:	Node	Assignee:	Andy Goldstein <agoldste>
Status:	CLOSED ERRATA	QA Contact:	DeShuai Ma <dma>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	3.2.0	CC:	aos-bugs, jkaur, jokerman, mmccomas, qixuan.wang, tdawson
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-05-12 16:33:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eric Rich 2016-03-23 19:50:07 UTC

Description of problem:

Expose secrets to containers in environment variables:  it should be possible to expose secrets to containers as environment variables. While this is arguably not the optimal way to consume secrets, it will be important to users taking their first steps into a cloud environment, and we should offer this feature to enable a good experience for users who need it.

Comment 2 Qixuan Wang 2016-03-24 13:36:59 UTC

Tested on devenv-rhel7_3820 (openshift v1.1.4-255-g8435563, kubernetes v1.2.0-36-g4a3f9c5, etcd 2.2.5), the bug has been fixed, thanks.

Here are result:
[root@ip-172-18-8-106 home]# oc logs secret-env-pod | grep MY_SECRET_DATA
MY_SECRET_DATA=value-1

Comment 4 errata-xmlrpc 2016-05-12 16:33:53 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2016:1064