v0.1.0

[akijakya]

Vault Secrets Reloader - Alpha Release v0.1.0 🎉

We are excited to announce the alpha release of Vault Secrets Reloader, a Kubernetes Controller that reloads workloads on a referenced secret change in HashiCorp Vault.

Vault Secret Reloader can periodically check if a secret that is used in watched workloads has a new version in Hashicorp Vault, and if so, automatically “reloads” them by incrementing an annotation value, initiating a rollout for the workload’s pods. This controller is essentially a complementary to Vault Secrets Webhook, relying on it for actually injecting secrets into the pods of the affected workloads.

🌟 Features

• Automated Secret Collection: Collect secrets from Kubernetes workloads using a special annotation
• Version-Based Secret Comparison: Cross-reference the collected secrets with their corresponding versions in Vault and reload affected workloads
• Tailored Scheduling: Customize the frequency of collection and reloading intervals to fit custom requirements

To get familiarized, try out the Reloader locally with the help of our guide - you only need Docker to be installed!

❓ What's next?

We are actively working on adding new features to the Reloader. Check out our issues page to see the new features we are working on.

🗣️ We are looking for feedback!

Your insights are crucial to us. You can support us with your feedback, bug reports, and feature requests by responding to this announcement, or opening an issue.

This release offers already existing Vault Secrets Webhook users an automated solution for injecting the latest version of their secrets into the pods, contributing to Bank-Vaults's mission to simplify and enhance secret management in the Cloud Native ecosystem.

🔗 Useful links

• Contributing guide
• Security procedures
• Code of Conduct
• Email: [email protected]

© License

The project is licensed under the Apache 2.0 License.

📢 Release Notes

• chore: add codeowners by @ramizpolic in chore: add codeowners #8
• feat: reloader POC 2 by @akijakya in feat: reloader POC 2 #6
• feat: add Helm chart, tests and Github Actions by @akijakya in Add Helm chart, tests and Github Actions #9
• docs: improve readme by @akijakya in docs: improve readme #21
• docs/ci: improvements by @akijakya in docs/ci: improvements #38

New Contributors

• @ramizpolic made their first contribution in chore: add codeowners #8
• @akijakya made their first contribution in feat: reloader POC 2 #6
• @dependabot made their first contribution in chore(deps): Bump k8s.io/client-go from 0.28.0 to 0.28.2 #19

Full Changelog: https://github.com/bank-vaults/vault-secrets-reloader/commits/v0.1.0

---

This discussion was created from the release v0.1.0.