[
https://issues.apache.org/jira/browse/CAMEL-26551?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18139178#comment-18139178
]
Claus Ibsen commented on CAMEL-26551:
-------------------------------------
PR https://github.com/apache/camel/pull/29283 is updated: the secret operation
now takes the secret store, the key and the metadata from the endpoint unless
{{allowSecretStoreAndKeyFromHeaders=true}}, so the {{CamelDaprMetadata}} header
is also ignored for the secret operation by default. A new multi-value option
{{metadata}} (prefix {{metadata.}}, e.g. {{metadata.namespace=production}})
sets the metadata on the endpoint; all producer operations send it, and the
header still takes its place for the other operations. Docs and upgrade guide
updated.
The unrelated config keys finding is filed as CAMEL-26664.
_Claude Code on behalf of Claus Ibsen (davsclaus)_
> camel-dapr - the secret store and key headers override the endpoint without
> an option to turn that off
> ------------------------------------------------------------------------------------------------------
>
> Key: CAMEL-26551
> URL: https://issues.apache.org/jira/browse/CAMEL-26551
> Project: Camel
> Issue Type: Improvement
> Reporter: Claus Ibsen
> Assignee: Claus Ibsen
> Priority: Minor
> Fix For: 4.24.0
>
>
> Found while fixing CAMEL-26263 (PR #29105).
> For the {{secret}} operation,
> {{DaprConfigurationOptionsProxy.getSecretStore}} and the key lookup take the
> {{CamelDaprSecretStore}} and {{CamelDaprKey}} headers first, and the endpoint
> options only when no header is set. A message can so read another secret, or
> use another secret store, than the endpoint is configured with.
> Proposed, like CAMEL-26273 for camel-clickhouse: honour these two headers for
> the secret operation only with an endpoint option (default false, with an
> upgrade guide entry), and document on the page which headers override the
> endpoint.
> _Claude Code on behalf of Claus Ibsen (davsclaus)_
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
