Bug 1385234

Summary:	RFE - Allow for global secrets in the 'openshift' project
Product:	OpenShift Container Platform	Reporter:	Nicholas Schuetz <nick>
Component:	RFE	Assignee:	Derek Carr <decarr>
Status:	CLOSED DEFERRED	QA Contact:	Johnny Liu <jialiu>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	3.3.0	CC:	aos-bugs, aquiroga, fshaikh, gmeghnag, jialiu, jokerman, lmeyer, mbarrett, mmccomas, nick, nschuetz, ostricki, pkhaire, sreber, suchaudh, vwalek
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-03-12 13:54:36 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Nicholas Schuetz 2016-10-15 13:49:08 UTC

Description of problem:
Allow secrets that are added to the 'openshift' project/namespace to be used in all projects.  Much in the same way that any template published in this namespace permeates down to all other projects.  This could be very useful when corps want to add a 'default' SSH key/secret for 'public' git projects that still require a valid internal user to authenticate.  This request comes from an FSI customer.

How reproducible:
create an SSH secret in -n openshift and then attempt a build in another project referencing that secret.  The build fails because the secret is not known to that project

-Nick

Comment 3 Eric Rich 2018-03-12 13:54:36 UTC

This bug has been identified as a dated (created more than 3 months ago) bug. 
This bug has been triaged (has a trello card linked to it), or reviewed by Engineering/PM and has been put into the product backlog, 
however this bug has not been slated for a currently planned release (3.9, 3.10 or 3.11), which cover our releases for the rest of the calendar year. 

As a result of this bugs age, state on the current roadmap and PM Score (being below 70), this bug is being Closed - Differed, 
as it is currently not part of the products immediate priorities.

Please see: https://docs.google.com/document/d/1zdqF4rB3ea8GmVIZ7qWCVYUaQ7-EexUrQEF0MTwdDkw/edit for more details.

Comment 4 Darko Ostricki 2021-10-21 11:22:35 UTC

We would be also very interested to have something like that .... can you tell if/in which release we can expect that this will be made available?

Comment 5 Vladislav Walek 2022-03-23 23:12:52 UTC

(In reply to Darko Ostricki from comment #4)
> We would be also very interested to have something like that .... can you
> tell if/in which release we can expect that this will be made available?

Hello Darko,

per the comments above, the feature was dropped so it won't be available in any version.

Comment 6 Simon Reber 2022-03-24 13:05:04 UTC

(In reply to Vladislav Walek from comment #5)
> (In reply to Darko Ostricki from comment #4)
> > We would be also very interested to have something like that .... can you
> > tell if/in which release we can expect that this will be made available?
> 
> Hello Darko,
> 
> per the comments above, the feature was dropped so it won't be available in
> any version.
The OpenShift Shared Resource CSI Driver introduced as Tech Preview in Openshift Container Platform 4.10 is potentially going into this direction and might provide the functionality you are looking for.

 - https://github.com/openshift/csi-driver-shared-resource
 - https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html#ocp-4-10-technology-preview

Comment 7 Darko Ostricki 2022-03-24 13:50:59 UTC

@Simon Reber
Thx for making me aware of that ... indeed it looks exactly like what we were looking for. 
So all we need is a bit patience. 
thx