# secret-agent

**Repository Path**: mirrors_wstrange/secret-agent

## Basic Information

- **Project Name**: secret-agent
- **Description**: Generate random Kubernetes secrets and optionally store them in a Cloud Secret Manager
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-09-26
- **Last Updated**: 2025-10-12

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# secret-agent

Generate secrets for the Forgerock Platform

## Features

The secret-agent generates the secrets required by the ForgeRock Platform. These secretes can be stored in-cluster as Kubernetes secrets. It can also store the secrets in a Cloud Secret Manager. Currently providers supported:

* Google Secret Manager
* AWS Secrets Manager

## Usage

### Deploy

To deploy the secret-agent, run:

```bash
kustomize build config/default | kubectl apply -f -
```

## Running the tests

* Some of the tests exercise parts of the code that os.Exec openssl and keytool, and kubebuilder's etcd
  * It's easiest to test in Docker
  * Ensure you're kube context is hooked up to a test cluster, such as minikube, then
    * `docker build -t gcr.io/forgerock-io/secret-agent-testing:latest -f --target=tester .`
    * `docker run -it --rm -v ${PWD}:/root/go/src/github.com/ForgeRock/secret-agent gcr.io/forgerock-io/secret-agent-testing:latest`
    * `go test ./...`