External Secret: Implementation to skip the creation of the default u… #1199
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
…ser credential secret and give the possibility to use an external one
This closes #
Note to reviewers: remember to look at the commits in this PR and consider if they can be squashed
Summary Of Changes
This changement is adding a new field in the SecretBackend struct of the rabbitmqcluster crd to avoid creating the credential secret for the default user automatically. A secret can be provisioned externally to the operator and be used by the operator using this field.
Pods will remain in init mode till the secret will be provisioned.
It can be useful when an external secret tool (like external secret operator) is used to export a secret from a cloud provider secret management system (like google secret manager).
Additional Context
This can be a first step in order to improve the external secrets management.
Local Testing
Tested both the operator and topology operator system tests against this modification
Please ensure you run the unit, integration and system tests before approving the PR.
To run the unit and integration tests:
You will need to target a k8s cluster and have the operator deployed for running the system tests.
For example, for a Kubernetes context named
dev-bunny
: