Keycloak Operator KeyCloakClient CR secret and Helm: how to avoid commits with secrets?

58 views
Skip to first unread message

Hector Salazar

unread,
Oct 13, 2021, 10:29:24 AM10/13/21
to Keycloak Dev
Hello,

What's the recommended way to specify a client secret without checking it in source control?
I noticed that the KeyCloak operator takes the value and creates a secret, but I want to avoid commits with secret values in my source control.
Is there a pattern for secrets in Helm that is compatible with the KeyCloakClient CR?

Thanks,

Hector

Robert Schuh

unread,
Dec 11, 2021, 6:26:14 PM12/11/21
to Keycloak Dev
The operator creates the secret automatically if you dont define one in the CR and your helm chart should then reference the secret, there is no need to check in any secret values, the helm chart would only need to know the deterministically generate secret name in kubernetes
Reply all
Reply to author
Forward
0 new messages