Cyberark Kubernetes password fetch and update DB secret retry if the password expires.

We have a requirement regarding Cyberark password.

1. We are using Openshift, the requirement is to fetch the password from Cyberark

2. All the passwords in the Cyberark as short lived due to security which is approx: 1 day

3. We need a Kubernetes service which will be utilised to fetch the password for a particular user from the Cyberark and then pass it to the application.

4. The Kubernetes service will eventually uses the password in the encrypted way and stores in the Kubernetes Secrets.

5. The application will make use of the Secret and connect to the Database

6. If the password expires ( 1 day - limit reaches ) , it should fetch the password by retry and update the secret automatically.

7. This will ensure the application will get the correct password all the time.


Prepare work Presentation.
You can use GIT repo and provide the link once the job in progress for regular checks.