hasura / graphql-engine

Blazing fast, instant realtime GraphQL APIs on your DB with fine grained access control, also trigger webhooks on database events.

Home Page:https://hasura.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Include Functionality for Hashicorp Vault

bmacwoo opened this issue · comments

Component

Securing Secrets and Keys

Is your proposal related to a problem?

No

Describe the solution you'd like

Looking for a mechanism to load secrets such as Hasura Admin keys, EE licenses and secrets from a file (secret mount) at runtime rather than injecting them as ENV Vars which is a security concern for sensitive information leakage.

Would be great to get a fromFile option supported which could be pointed to a secret mount or a location at runtime which ideally be integrated with AWS secrets manager or Hashicorp Vault or K8s secrets etc.

Describe alternatives you've considered

N/A