[teiid-issues] [JBoss JIRA] (TEIIDSB-157) Support loading password credential from infinispan secret

[Ramesh Reddy (Jira)]

    [ https://issues.redhat.com/browse/TEIIDSB-157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13949711#comment-13949711 ] 

Ramesh Reddy commented on TEIIDSB-157:
--------------------------------------

Why not configure as ENV properties in the DV VDB, referencing back to the secret it created? Which override the properties InfinispanConfiguration?

> Support loading password credential from infinispan secret
> ----------------------------------------------------------
>
>                 Key: TEIIDSB-157
>                 URL: https://issues.redhat.com/browse/TEIIDSB-157
>             Project: Teiid Spring Boot
>          Issue Type: Sub-task
>          Components: datasource
>            Reporter: Steven Hawkins
>            Priority: Major
>             Fix For: 1.4.0, 1.3.1
>
>
> The infinispan operator generates a secret that contains a yaml file, which is where the developer password is stored.  
> There three approaches:
> 1. for materialization assume that we will "own" the DataGrid instance such that we'll create and pass our own secret file for infinispan to use.  In this case we'll know the password and can provide that to the connection factory via an env property.
> 2. add logic to the connection factory to specify a "credential file" such that we'll parse the yaml from the given location (a mount of the secret) and find the appropriate credential for the given username (typically developer).
> 3. ask the infinispan team to allow for easier consumption of the secret (a secret per user?)
> To get things working with the example, I can take the first approach - but it will look a little convoluted.
> In general 2 or 3 will be needed in scenarios where we expect to simply pick up existing credentials.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)