Skip to content

feat: support client_secret in openid-connect plugin use secret #12219

Description

@sahithi2105

Current Behavior

How can I securely reference the client_secret in the OIDC Connect plugin from AWS Secrets Manager without exposing it in YAML configurations? APISIX doesn't seem to support referencing external secrets directly, and accessing them through Lua scripts isn't working either. What is the recommended approach to achieve this securely?

Expected Behavior

want to securely refer client_secret in apisixroutes form secret manager.

Error Logs

No response

Steps to Reproduce

repoURL: https://charts.apiseven.com
targetRevision: 2.10.0

Environment

  • repoURL: https://charts.apiseven.com
    targetRevision: 2.10.0
  • Operating system (run uname -a):
  • OpenResty / Nginx version (run openresty -V or nginx -V):
  • etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info):
  • APISIX Dashboard version, if relevant:
  • Plugin runner version, for issues related to plugin runners:
  • LuaRocks version, for installation issues (run luarocks --version):

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status
    ✅ Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions