deckhand/releasenotes/notes/secret-substitution-6eff2c93bf11d82e.yaml
Felipe Monteiro d2d2312af9 DECKHAND-66: Document substitution implementation
This PS implements documentation substitution and
the rendered-documents endpoint. Each time the
rendered-documents is queried, the documents for
the reqeust revision_id dynamically undergo
secret substitution.

All functional tests related to secret substitution
have been unskipped.

Deckhand currently does not real testing for
verifying that secret substitution works
for encrypted documents. This will only happen
when integration testing is added to Deckhand to
test its interaction with Keystone and Barbican.

Included in this PS:
  - basic implementation for secret substitution
  - introduction of jsonpath_ng for searching for and
    updating jsonpaths in documents
  - rendered-documents endpoint
  - unit tests
  - all relevant functional tests unskipped
  - additional bucket controller tests include RBAC
    tests and framework testing RBAC via unit tests

Change-Id: I86f269a5b616b518e5f742a4005891412226fe2a
2017-10-13 15:16:27 -04:00

9 lines
352 B
YAML

---
features:
- |
Deckhand now supports secret substitution for documents. The endpoint
``GET revisions/{revision_id}/rendered-documents`` has been added to
Deckhand, which allows the possibility of listing fully substituted
documents. Only documents with ``metadata.substitutions`` field undergo
secret substitution dynamically.