mattcasters commented on PR #8723: URL: https://github.com/apache/hop/pull/8723#issuecomment-5950936781
Thanks for helping out @bamaer. I'll pick up these suggestions this weekend. The ultimate goal is to avoid an (organisationally) expensive pass around SECOPS, Jenkins, permissions to deploy a custom docker container, running said custom container on k8s/OpenShift, the whole 9 yards with audit trails on top of all of them. This way, we can ask permissions to deploy specific marketplace plugins in a local artifactory and the integration then happens at runtime at the cost of 10-20s of startup time. The second part of this plan is obviously to use the new git VFS driver giving us access to the project metadata that we need to run, using a standard deploy key. A final part in the painless deployment of these stock apache/hop container images on k8s is the ability to pass secrets to bootstrap connections to a vault (Hashicorp Vault in our case) from a k8s secrets manager (OpenShift in this case). It might be needed to reserve a few standard variables in the docker configuration to allow these to find their way into a Hop project to allow a variable resolver to do its work. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
