Giters

NLnetLabs / krill

RPKI Certificate Authority and Publication Server written in Rust

Home Page:https://nlnetlabs.nl/projects/routing/krill/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Environment variable usage

Tadcas opened this issue · comments

commented

Hello,

Is there any way to use client_secret as environment variable?
The value I want to use:

krill/defaults/krill-multi-user.conf

Line 471 in 0ede473

# client_secret = "zzzzzzzz"

Not sure if I do not find how to use env variable, but I do not want to add secret in plaintext in my krill.conf file.

As example, if I do not want to use admin_token and write password in krill.conf, I can use KRILL_ADMIN_TOKEN as environment variable:

krill/defaults/krill.conf

Line 128 in 0ede473

### admin_token =

Thanks in advance,
Tadas

commented

Hi Tadas, it is not currently possible to specify the OpenID Connect client secret by environment variable. OpenID Connect was implemented with a basic feature set several years ago, so we could gain operational experience and feedback from the field.

As it stands, OpenID in Krill currently has very limited use and none of our paying customers depend on it. At this time, we do not have any plans to expand the feature set. Maintaining the robustness of the application and staying up to date with developing RPKI standards will take precedence for the forseeable future.