Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for Doppler Secrets #66

Open
sky29 opened this issue Sep 1, 2023 · 1 comment
Open

Support for Doppler Secrets #66

sky29 opened this issue Sep 1, 2023 · 1 comment
Labels
enhancement New feature or request

Comments

@sky29
Copy link

sky29 commented Sep 1, 2023

Is your feature request related to a problem? Please describe.

Hello,

Is there any way we can use this repository with other secret managers like Doppler. e.g. If I change the password in Doppler, it should change rabbitmq "default user's" password ?

Doppler sync kubernetes secrets and reload kubernetes controller through annotations (based on kubernetes deployment strategy):
https://docs.doppler.com/docs/kubernetes-operator#automatic-redeployments

Step by Step Process/Scenario:

  1. I use Doppler to hold secrets (rabbitmq: default_user and default_password)
  2. I am having my own helm chart to deploy rabbitmq in HA mode (with external pvc mounted at: /var/lib/rabbitmq/mnesia : to keep data safe while pod restart). IT is DIY kind of helm chart: https://github.com/rabbitmq/diy-kubernetes-examples
  3. I have configmap that disables guest user (loopback_users.guest = false). I am injecting secrets in rabbitmq statefulset as environment variable (default_user, default_pass) ..... this all are working fine and I am able to login to rabbitmq management UI using doppler secrets.
  4. Now I change the password in Doppler, which reloads rabbitmq deployment, but it doesn't change the password in rabbitmq database. It might be because I am using external PVC, which keeps old passwords. I didn't find any way to implement this step ? loading json file (https://github.com/oprearocks/RabbitMQ-Docker-cluster/blob/master/definitions.json) is also complicated because i need to calculate hash.

can anyone help here ?

Describe the solution you'd like

I want to change RabbitMQ default User's password, when I change the password in Doppler

Describe alternatives you've considered

No response

Additional context

No response

@Zerpet
Copy link
Contributor

Zerpet commented Nov 11, 2024

This feature is reasonable. A PR would be most welcome, as we don't have bandwidth to work on this in the short term.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants