AES256CFB128 keys passed in as env var

[topgunkebab99]

Hi,

I'm trying to run the docker version of NSO in Kubernetes and was hoping to pass in the AES256CFB128_KEY value via something like an env var sourced from a secret instead of hard coding into a file. Was wondering if this is possible as after initial attempts it doesn't seem to be working for me (unable to login to devices after container reboot as passwords are scrambled) so was wondering if I'm missing something.  When I just mount the ncs.crypto_keys file it works fine but ideally would like some way of doing it so that is not stored in git.

Thanks!

Jon.

[snovello]

Hi
there is this project
https://gitlab.com/nso-developer/nso-secrets-in-vault/
to solve this issue using vault to store the keys. I know it is not exactly the approach you mentioned.

[topgunkebab99]

Thanks I will check this out!

Jon.