Bug 1320719 - [RFE] Expose secret keys in environment variables
Summary: [RFE] Expose secret keys in environment variables
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Node
Version: 3.2.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: ---
Assignee: Andy Goldstein
QA Contact: DeShuai Ma
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-23 19:50 UTC by Eric Rich
Modified: 2019-10-10 11:39 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-05-12 16:33:53 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2016:1064 0 normal SHIPPED_LIVE Important: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update 2016-05-12 20:19:17 UTC

Description Eric Rich 2016-03-23 19:50:07 UTC
Description of problem:

Expose secrets to containers in environment variables:  it should be possible to expose secrets to containers as environment variables. While this is arguably not the optimal way to consume secrets, it will be important to users taking their first steps into a cloud environment, and we should offer this feature to enable a good experience for users who need it.

Comment 2 Qixuan Wang 2016-03-24 13:36:59 UTC
Tested on devenv-rhel7_3820 (openshift v1.1.4-255-g8435563, kubernetes v1.2.0-36-g4a3f9c5, etcd 2.2.5), the bug has been fixed, thanks.

Here are result:
[root@ip-172-18-8-106 home]# oc logs secret-env-pod | grep MY_SECRET_DATA
MY_SECRET_DATA=value-1

Comment 4 errata-xmlrpc 2016-05-12 16:33:53 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2016:1064


Note You need to log in before you can comment on or make changes to this bug.