Details
-
Work Item
-
Resolution: Won't Do
-
Major
-
None
-
None
-
All
-
-
GreenHopper Ranking:0|i29x5v:
-
9223372036854775807
-
Small
Description
The current component Server can already handle multitenant requests as it uses the tenant ID in the request in order to decrypt the relevant payload provided in the request.
It uses a vault token that is exposed as a file in a mounted volume.
For multitenancy the CS container is usable as of today although Infosec advised to make sure no credentials where stored on the java heap.
For the Vault authentication we need to make the CS chart evolve in order to have an vault agent as a side car that would manage vault authentication and token lifecycle.
In fact I would suggest that we use the VaultSideCar injector project developed by Alain.
https://github.com/Talend/vault-sidecar-injector