Current Behavior
How can I securely reference the client_secret in the OIDC Connect plugin from AWS Secrets Manager without exposing it in YAML configurations? APISIX doesn't seem to support referencing external secrets directly, and accessing them through Lua scripts isn't working either. What is the recommended approach to achieve this securely?
Expected Behavior
want to securely refer client_secret in apisixroutes form secret manager.
Error Logs
No response
Steps to Reproduce
repoURL: https://charts.apiseven.com
targetRevision: 2.10.0
Environment
- repoURL: https://charts.apiseven.com
targetRevision: 2.10.0
- Operating system (run
uname -a):
- OpenResty / Nginx version (run
openresty -V or nginx -V):
- etcd version, if relevant (run
curl http://127.0.0.1:9090/v1/server_info):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run
luarocks --version):
Current Behavior
How can I securely reference the client_secret in the OIDC Connect plugin from AWS Secrets Manager without exposing it in YAML configurations? APISIX doesn't seem to support referencing external secrets directly, and accessing them through Lua scripts isn't working either. What is the recommended approach to achieve this securely?
Expected Behavior
want to securely refer client_secret in apisixroutes form secret manager.
Error Logs
No response
Steps to Reproduce
repoURL: https://charts.apiseven.com
targetRevision: 2.10.0
Environment
targetRevision: 2.10.0
uname -a):openresty -Vornginx -V):curl http://127.0.0.1:9090/v1/server_info):luarocks --version):