Skip to content

Mvpkaas 726|727|729: client secrets

Ghost User requested to merge mvpkaas-727 into master

Implements MVPKAAS-726, MVPKAAS-727 and MVPKAAS-729.

Briefly:

  • create Rancher Token to perform TokenReview on the client cluster
  • create Vault kubernetes auth backend on the cloud vault
  • create vault policies for client pods and customer Keycloak roles caascad-devops and caascad-devops-CLIENT_ZONE to allow management/usage of vault secrets
  • deploy vault_injector on client zones (if requested)

Merge request reports