Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to auto-create a Conjur data encryption key #136

Open
diverdane opened this issue Jan 20, 2021 · 0 comments
Open

Add option to auto-create a Conjur data encryption key #136

diverdane opened this issue Jan 20, 2021 · 0 comments

Comments

@diverdane
Copy link
Contributor

Is your feature request related to a problem? Please describe.

Currently, dataKey is a required chart value. Users are recommended to run the following
for manually creating a data encryption key:

```
DATA_KEY="$(docker run --rm cyberark/conjur data-key generate)"
```

and then this value should be configured either in a custom values.yaml file,
or with the following helm install ... command line flag:

--set dataKey="$DATA_KEY"

It should be possible to add a chart value to enable the auto-creation of the Conjur
data encryption key. The value might looks something like this:

database:
    autoGenerateDataKey: false

For implementing this feature, it may be possible to add the
auto-generation logic into the conjur-oss/templates/_helpers.tpl template file.

When this feature is implemented, a deprecation notice must be added to the
conjur-oss/templates/NOTES.txt if the auto-generation of the encryption key
is expected to become the default for the next major release.

Describe the solution you would like

  • A chart value is available to have the Conjur data encryption key automatically generated.
  • A deprecation warning shows up in NOTES.txt if auto-generation will become the default for next major release
    (unless user is enabling this feature, since deprecation warning is not necessary).

Describe alternatives you have considered

None.

Additional context

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

1 participant