Skip to content

[TASK] Shift secrets management for CNPG Credentials to External Secrets Operator#124

Merged
khatrivarun merged 19 commits intomainfrom
task/117/cnpg-external-secrets
Mar 15, 2026
Merged

[TASK] Shift secrets management for CNPG Credentials to External Secrets Operator#124
khatrivarun merged 19 commits intomainfrom
task/117/cnpg-external-secrets

Conversation

@khatrivarun
Copy link
Contributor

@khatrivarun khatrivarun commented Mar 15, 2026

Implemented Changes

  • Shifted secrets management for CNPG Credentials to External Secrets Operator
  • For dependent modules such as Keycloak, using External Secrets Operator to pull in the required credentials
  • For generating passwords, using External Secrets Operator for the same
  • Updated Keycloak Deployment to generate DER Format Key on the fly using init container

Closes: #117

@khatrivarun
feat(cnpg): client and secrets push to openbao
fc271aa
@khatrivarun
feat(cnpg): references update
f93cdca
@khatrivarun
fix(cnpg): for looping fix
b131180
@khatrivarun
feat(keycloak): certificates and secrets update to pull from openbao
c04c9ee
@khatrivarun
fix(keycloak): dependencies fix
faf7352
@khatrivarun
fix(keycloak): api versions fix
465428d
@khatrivarun
fix(keycloak): key.der messed up
efe6131
@khatrivarun
fix(keycloak): key.der messed up
9195556
@khatrivarun
fix(keycloak): key.der messed up
10d3063
@khatrivarun
fix(keycloak cnpg): switch to proper pem certificates
c2d31fd
@khatrivarun
fix(keycloak): generating der key on fly
6d86a92
@khatrivarun
fix(keycloak): generating der key on fly
501163e
@khatrivarun
fix(keycloak): generating der key on fly
bab98b1
@khatrivarun
fix(keycloak): generating der key on fly
bfea314
@khatrivarun
fix(keycloak): pdb dependency
6389e16
@khatrivarun
feat(keycloak): comments
aac2ce2
@khatrivarun
feat(cnpg): comments
bac9f57
@khatrivarun
docs(cnpg): README update
690adca
@khatrivarun
docs(cnpg): README update
843ebeb
@khatrivarun khatrivarun self-assigned this Mar 15, 2026
@khatrivarun khatrivarun added enhancement New feature or request k8s Issues related to Kubernetes Manifests labels Mar 15, 2026
@khatrivarun khatrivarun linked an issue Mar 15, 2026 that may be closed by this pull request
[TASK] Shift secrets management for CNPG Credentials to External Secrets Operator #117
Closed
khatrivarun
khatrivarun commented Mar 15, 2026
View reviewed changes
Copy link
Contributor Author

@khatrivarun khatrivarun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@khatrivarun khatrivarun merged commit b38f858 into main Mar 15, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@khatrivarun khatrivarun

Labels

enhancement New feature or request k8s Issues related to Kubernetes Manifests

Projects

None yet

Milestone

Secrets Management Overhaul with Open...

Development

Successfully merging this pull request may close these issues.

[TASK] Shift secrets management for CNPG Credentials to External Secrets Operator

1 participant

@khatrivarun