Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow reading Pagerduty secrets from files #2623

Closed
wants to merge 1 commit into from

Conversation

sinkingpoint
Copy link
Contributor

This commit adds two optional config values to pagerduty routing
configurations - service_key_file and routing_key_file. These function
the same as their non _file variants (and infact only one can be
specified), but allows reading the value from a file instead of
embedding the secret in the config file itself

Signed-off-by: sinkingpoint colin@quirl.co.nz

c.c. @roidelapluie as discussed, this trims that PR down to just the Pagerduty stuff

This commit adds two optional config values to pagerduty routing
configurations - service_key_file and routing_key_file. These function
the same as their non _file variants (and infact only one can be
specified), but allows reading the value from a file instead of
embedding the secret in the config file itself

Signed-off-by: sinkingpoint <colin@quirl.co.nz>
@sinkingpoint
Copy link
Contributor Author

sinkingpoint commented Jun 16, 2021

Partially solves #2618 / #2498

@roidelapluie
Copy link
Member

I am wondering if we should add the extra helper function or not. It is really case by case if it should be read from file because we want to use the content of the file every time we make a request. So we could miss a place later on where we would use a "static" secret instead of a dynamic one.

@sinkingpoint
Copy link
Contributor Author

I think the helper function is still useful - itherwise we would have a bunch of redundant IO logic everywhere. There's nothing stopping you calling the helper every time you use the secret. Particularly in a world where all the secrets are file readable, having this "if file read file, otherwise use plain text secret" logic scattered about everywhere sounds bad when we can abstract it

@stale stale bot added the stale label Sep 3, 2021
@gecgooden
Copy link

Hi, I'm interested in this change too. Is there anything that needs to be done for it to be ready to be reviewed, that I can help with?

@stale stale bot removed the stale label Nov 17, 2021
@mattchrist
Copy link

I'm also interested in this

@d7volker
Copy link

I am also interested it this PR. I will ease the configuration of pagerduty, heavily.

@simonpasquier
Copy link
Member

Closed by #3107

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants