You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "mayankmurari (via GitHub)" <gi...@apache.org> on 2025/06/04 10:17:49 UTC
[I] help request: Integrating APISIX with External Secret Operator [apisix]
mayankmurari opened a new issue, #12285:
URL: https://github.com/apache/apisix/issues/12285
### Description
Description:
'm using APISIX in standalone mode and have configured a Kubernetes ExternalSecret that syncs a secret from HashiCorp Vault to a Kubernetes Secret.
Now I want to reference this secret in an APISIX consumer for the key-auth or basic-auth plugin.
Setup:
APISIX running in standalone mode
Kubernetes secret created via External Secrets Operator
Storing all Consumer Keys(Basic Auth, Key Auth) in Vault.
Question:
What's the recommended way to reference Kubernetes secrets in APISIX standalone mode?
Specifically:
Does APISIX standalone support any native Kubernetes secret integration?
Is environment variable substitution the only supported method?
### Environment
- APISIX version (run `apisix version`): 3.11.0
- Operating system (run `uname -a`): NA
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`): NA
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): NA
- APISIX Dashboard version, if relevant: NA
- Plugin runner version, for issues related to plugin runners: NA
- LuaRocks version, for installation issues (run `luarocks --version`): NA
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Integrating APISIX with External Secret Operator [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #12285:
URL: https://github.com/apache/apisix/issues/12285#issuecomment-4010121752
Closed due to prolonged lack of progress. If you're still interested in this feature, please let us know.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Integrating APISIX with External Secret Operator [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop closed issue #12285: help request: Integrating APISIX with External Secret Operator
URL: https://github.com/apache/apisix/issues/12285
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Integrating APISIX with External Secret Operator [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #12285:
URL: https://github.com/apache/apisix/issues/12285#issuecomment-2942497919
The Secret resource type is provided in APISIX to handle such issues. You can refer to https://apisix.apache.org/docs/apisix/terminology/secret/
You can use environment variables to manage secrets like:
```
$ENV://$env_name/$sub_key
```
You can also just citation HashiCorp Vault secrets like:
```
$secret://$manager/$id/$secret_name/$key
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Integrating APISIX with External Secret Operator [apisix]
Posted by "mayankmurari (via GitHub)" <gi...@apache.org>.
mayankmurari commented on issue #12285:
URL: https://github.com/apache/apisix/issues/12285#issuecomment-2943485531
Hi @Baoyuantop Thanks for your inputs. I am able to load secret data in APISIX plugin using ENV variable.
Setting env variable from secret key reference.
```yaml
env:
- name: BASIC_AUTH_PASSWORD
valueFrom:
secretKeyRef:
name: apisix-app
key: apisix-keyauth-credential
Using env variable in APISIX Consumer
- username: testuser
plugins:
basic-auth:
username: jack2020
password: $ENV://BASIC_AUTH_PASSWORD
Can I not use secret key reference directly in APISIX consumers?
- username: testuser
plugins:
basic-auth:
username: jack2020
password:
secretRef:
name: apisix-app
key: apisix-keyauth-credential
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Integrating APISIX with External Secret Operator [apisix]
Posted by "Baoyuantop (via GitHub)" <gi...@apache.org>.
Baoyuantop commented on issue #12285:
URL: https://github.com/apache/apisix/issues/12285#issuecomment-2944437593
> Above config is working but can I not use secret key reference directly in APISIX consumers?
Not currently supported.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org