UNCLASSIFIED - NO CUI

New feature request: Passing bucket access keys as secrets for Nexus

Feature Request

Why

[blob-storage.yaml] (https://repo1.dso.mil/big-bang/product/packages/nexus/-/blob/main/chart/templates/bigbang/blob-storage.yaml?ref_type=heads)

We can't use env to reference the secrets as below due to bucketSecurity: is a property not an env.

env:

  • name: SECRET_KEY_ID valueFrom: secretKeyRef: name: nexus-secrets-values key: access_key_id

Instead of passing the secrets through helm release, I'd like the new function to be added to allow secrets to be passed in to the values.yaml through external secret.

- name: "docker-s3"
 type: "s3"
 blobstore_data:
   name: "docker-s3"
   bucketConfiguration:
     bucket:
       region: "us-gov-west-1"
       name: "eks-sandbox-nexus-docker"
       prefix: "docker-s3/"
       expiration: 3
     bucketSecurity:
       accessKeyId: "how-to-pass-accessKeyId-thru-external-secret"
       secretAccessKey: "how-to-pass-secretAccessKey-thru-external-secret"
Edited by Vickie Shen