Add support / integration for Key Management Service [36889732]

Assigned

Feature Request

Status Update

No update yet.

Description

sw...@bainbridgehealth.com

created issue #1

Apr 4, 2017 05:48PM

Google recently promoted the Key Management Service (KMS) out of beta. This is a great tool for managing secrets.

It would be awesome if there were integration between Deployment Manager (DM) and KMS that allowed you to specify a secret encrypted with a KMS managed key in your configurations and have the DM decrypt that secret when creating resources.

For example, this could be used to encrypt certificates and passwords for GKE cluster authentication, root passwords for Cloud SQL databases, etc.

Comments

cb...@google.com <cb...@google.com> #2Apr 5, 2017 08:38PM

I have forwarded this request to the engineering team. We will update this issue with any progress updates and a resolution.

Best Regards,
Josh Moyer
Google Cloud Platform Support

cb...@google.com <cb...@google.com> #3Apr 6, 2017 04:49PM

Accepted by cb...@google.com.

This is not only useful for IP addresses, but also for many other resources. I understand that names are currently used as identifiers, so this request is probably not trivial to implement. Maybe distinguishing between a (numeric, automatically generated) identifier and a (textual) label is the way to go?

cb...@google.com <cb...@google.com> Apr 27, 2017 03:07PM

Assigned to gc...@google.com.

Issue 36889732

Description

Issue summary

Comments

cb...@google.com <cb...@google.com> #2Apr 5, 2017 08:38PM

cb...@google.com <cb...@google.com> #3Apr 6, 2017 04:49PM

cb...@google.com <cb...@google.com> Apr 27, 2017 03:07PM

Add comment

Issue metadata