[teiid-issues] [JBoss JIRA] (TEIIDSB-157) Support loading password credential from infinispan secret

Steven Hawkins (Jira) issues at jboss.org
Tue Jan 21 12:00:55 EST 2020


     [ https://issues.redhat.com/browse/TEIIDSB-157?focusedWorklogId=12449930&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-12449930 ]

Steven Hawkins logged work on TEIIDSB-157:
------------------------------------------

                Author: Steven Hawkins
            Created on: 21/Jan/20 11:58 AM
            Start Date: 21/Jan/20 11:58 AM
    Worklog Time Spent: 2 hours 

Issue Time Tracking
-------------------

    Remaining Estimate: 3 hours  (was: 5 hours)
            Time Spent: 2 hours
            Worklog Id:     (was: 12449930)


> Support loading password credential from infinispan secret
> ----------------------------------------------------------
>
>                 Key: TEIIDSB-157
>                 URL: https://issues.redhat.com/browse/TEIIDSB-157
>             Project: Teiid Spring Boot
>          Issue Type: Sub-task
>          Components: datasource
>            Reporter: Steven Hawkins
>            Priority: Major
>             Fix For: 1.4.0
>
>   Original Estimate: 5 hours
>          Time Spent: 2 hours
>  Remaining Estimate: 3 hours
>
> The infinispan operator generates a secret that contains a yaml file, which is where the developer password is stored.  
> There three approaches:
> 1. for materialization assume that we will "own" the DataGrid instance such that we'll create and pass our own secret file for infinispan to use.  In this case we'll know the password and can provide that to the connection factory via an env property.
> 2. add logic to the connection factory to specify a "credential file" such that we'll parse the yaml from the given location (a mount of the secret) and find the appropriate credential for the given username (typically developer).
> 3. ask the infinispan team to allow for easier consumption of the secret (a secret per user?)
> To get things working with the example, I can take the first approach - but it will look a little convoluted.
> In general 2 or 3 will be needed in scenarios where we expect to simply pick up existing credentials.



--
This message was sent by Atlassian Jira
(v7.13.8#713008)


More information about the teiid-issues mailing list