Adding secrets to a container
Currently there is no possibility to put a secret variable or file onto a container in a secure/hidden way. ENV variables are visible in clear test There is no docker secrets support (as I believe this only works in docker on swarm mode) Secret file cannot be mounted as volumes.
There should be a possibility to pass a hidden value into a container on startup
Hello @artooc,
Thank you for your issue. Can you explain what kind of feature you have in mind?
A new container is starting on a host. The container needs to fetch its configuration, certificates, or reach out to external systems in a secure way. So we want to pass some secret values into a running container on startup. Things like hashicorp Vault or AWS credentials. This is possible in docker swarm mode or in kubernetes (via secrets) but not in Netbox plugin. What could be done in Netbox:
- hiding ENV value so that is not visible clear text in Netbox dashboard - more of a workaround that a real solution, but already helpful
- possibility of putting content onto a docker volume from Netbox. Today a docker volume can be mouned to a running container, but no files can be put there from outside