cyberark / conjur

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

Home Page:https://conjur.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Method for determining conjur commit from a built container

hughsaunders opened this issue · comments

Is your feature request related to a problem? Please describe.

As a user of conjur containers, I need to determine exactly which version of conjur the current container includes. The containers do include a VERSION file but that usually shows the latest tag, which doesn't help determine the version for edge builds.

Describe the solution you would like

I would like a file added to the container that contains the conjur commit SHA that the container was built from. That way the exact conjur version can easily be determined by users of the container.

Describe alternatives you have considered

One alternative would be to tag conatiners with the conjur git sha as well as edge. That wouldn't be as easy for users and would potentially increase storage costs.

Additional context

I am using conjur in a deployment project, when I find an issue with conjur I need to be able to look back through my builds and determine when the problem was introduced. Currently this deployment project stores the docker SHA of the container for each deployment, but its difficult to determine the conjur commit SHA from that.