Skip to content

[quorum] integrate aws secrets manager#2623

Merged
sownak merged 1 commit intohyperledger-bevel:developfrom
saurabhkumarkardam:quorum-2200
Sep 25, 2024
Merged

[quorum] integrate aws secrets manager#2623
sownak merged 1 commit intohyperledger-bevel:developfrom
saurabhkumarkardam:quorum-2200

Conversation

@saurabhkumarkardam
Copy link
Copy Markdown
Contributor

@saurabhkumarkardam saurabhkumarkardam commented Sep 18, 2024

Commit to be reviewed


feat(quorum): integrate aws secrets manager

This PR will allow the use of the AWS service called Secrets Manager to store sensitive information, similar to how we use HashiCorp Vault for the same purpose.

- A guide named `integrate-aws-secrets-manager-with-eks.md` has been introduced to help users securely connect their EKS cluster with Secrets Manager using OIDC.
- The Quorum master README has been updated to guide users on how to deploy a network with AWS Secrets Manager.
- A Python script has been added that contains the CRUD operation code for AWS Secrets Manager, injecting the script into the container via ConfigMap.
- The Quorum Genesis and Node charts code have been updated to support Secrets Manager.

fixes #2200

Comment thread platforms/quorum/charts/quorum-genesis/templates/genesis-job-init.yaml Outdated
Copy link
Copy Markdown
Contributor

@sownak sownak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

condition needs to be checked.

@suvajit-sarkar
Copy link
Copy Markdown
Contributor

The keys will conflict if same platforms are deployed using the same secret manager region. See if the keys can be made unique using the namespace

Comment thread platforms/quorum/charts/quorum-node/templates/node-hooks-pre-install.yaml Outdated
This PR will allow the use of the AWS service called Secrets Manager to store sensitive information, similar to how we use HashiCorp Vault for the same purpose.

- A guide named "integrate-aws-secrets-manager-with-eks.md" has been introduced to help users securely connect their EKS cluster with Secrets Manager using OIDC.
- The Quorum master README has been updated to guide users on how to deploy a network with AWS Secrets Manager.
- A Python script has been added that contains the CRUD operation code for AWS Secrets Manager, injecting the script into the container via ConfigMap.
- The Quorum Genesis and Node charts code have been updated to support Secrets Manager.

fixes hyperledger-bevel#2200

Signed-off-by: saurabhkumarkardam <saurabh.kumar.kardam@accenture.com>
Copy link
Copy Markdown
Contributor

@sownak sownak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@suvajit-sarkar suvajit-sarkar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@sownak sownak merged commit 2e1e5a1 into hyperledger-bevel:develop Sep 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants