Skip to content

Improve authz in secret manager credential provider #2032

New issue
New issue
Closed
Task
Closed
Improve authz in secret manager credential provider#2032
Task
Assignees
yufan-su
Labels
area/networkarea/securitySecurity related issue/prkind/featureAn enhancement / feature request or implementation

Description

@yufan-su
Yufan Su (yufan-su)
opened on Oct 1, 2026

In #1991, we added a new credential provider which reads secrets from google cloud secret manager,

The current implementation has a basic authz which maps atespace->project allowlist in a config map.

We should improve on it to have better authz model.

Activity

  1. Yufan Su (yufan-su)
    self-assigned this
    on Oct 1, 2026
  2. Yufan Su (yufan-su)
    added
    area/network
    on Oct 1, 2026
  3. Yufan Su (yufan-su)
    added the
    Task
    issue type on Oct 1, 2026
  4. Aditya Shantanu (aditya-shantanu)
    added
    kind/featureAn enhancement / feature request or implementation
    area/securitySecurity related issue/pr
    on Oct 1, 2026

  5. destijl commented on Oct 29, 2026

    @destijl
    Greg Castle (destijl)
    on Oct 29, 2026
    Collaborator

    PR #3365 (8f023746) moved the GCP Secret Manager credential provider out of agent-substrate/substrate into agent-substrate-plugins/credprovider-gcp-secret-manager.

    Closing this issue here and tracking the remaining authorization enhancements in agent-substrate-plugins/credprovider-gcp-secret-manager#5.

  6. Greg Castle (destijl)
    closed this as completedon Oct 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

area/networkarea/securitySecurity related issue/prkind/featureAn enhancement / feature request or implementation

Type

Task

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions