Hi!
I'm evaluating the new WASM plugin ecosystem and try to figure out how i would pass some credentials to access some third party service from within my plugin.
I thought of two ways:
- Pass the address and credentials in the host config of the plugin. But this seems like no good idea at all because the credentials would be visible within the traefik configuration.
- Read credentials that are defined as k8s secret in the cluster and define the name of the secret in the host config. This is where i don't know if this would be even possible. I cannot use a incluster client using some service account token to authenticate in the plugin context, right?
So, what are best practices to pass some credentials to the plugin?
Cheers
Armin