-
Notifications
You must be signed in to change notification settings - Fork 10
Description
Description
Hi Team,
We have recently updated the WLF (Workload Factory) Lambda link with support for secret manager (client side) as the password vault to support a more secure authentication, where we do not possess any passwords.
The ask is to support this configuration also in our ONTAP TF code
Please see the instructions from engineering below:
As part of the payload that is sent to the lambda, they need to add extra header x-aws-secret-info
The value of the header is base64 encoding of the secret arn
To get the value of the secret they need to parse the value and get the fields of user and password
We have added as part of the link to get if the secret manager feature is supported
They can invoke the lambda with requestType of health and in the response they will get features field with value as array or null
if there is value – one of the values in the array is secret-manager
Affected Resource(s) and/or Data Source(s)
No response
Potential Terraform Configuration
References
No response
Would you like to implement a fix?
None
Metadata
Metadata
Assignees
Labels
Type
Projects
Status