Skip to content

Password change prevention in the Secret object #1907

@astanez

Description

@astanez

Hello,

Is your feature request related to a problem? Please describe.
In my OpenShift 4.19 I created a SealedSecret. If I change the password in the Secret object, it is not overwritten by the password from SealedSecret. Which is sad. :)
I also tryed with annotations:
metadata:
annotations:
sealedsecrets.bitnami.com/managed: 'true'
sealedsecrets.bitnami.com/patch: 'true'

It woud be an absolutely useful feature, if controller could recognise the password change in Secret, consider it as configuration drift and react in two configurable ways:

  • Inform about configuration drift
  • Eliminate configuration drift: Overwrite password in Secret with the password from SealedSecred.

Metadata

Metadata

Assignees

No one assigned

    Labels

    triageIssues/PRs that need to be reviewed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions