Skip to content

Conversation

@spomytkin
Copy link
Owner

@spomytkin spomytkin commented Sep 15, 2025

…ment

  • Add comprehensive HashiCorp Vault credentials JSON schema with support for multiple auth methods (token, AppRole, AWS, Kubernetes, UserPass, LDAP)
  • Implement Python HashiCorp Vault secrets manager using hvac library with full authentication support
  • Implement Java HashiCorp Vault secrets manager for server-side operations using HttpClient
  • Support both KV v1 and KV v2 secrets engines with proper path handling
  • Add SSL/TLS configuration options including custom certificates and mTLS
  • Update secrets manager factory classes to include HashiCorp Vault provider
  • Add hvac>=1.0.0 dependency to Python ingestion setup
  • Include comprehensive unit tests with mock-based Vault API testing
  • Add complete documentation with setup guides, authentication examples, and troubleshooting
  • Follow existing OpenMetadata patterns from Kubernetes vault implementation (PR Fix #22511: k8s secret support for Secrets Manager open-metadata/OpenMetadata#22516)

Describe your changes:

Improvement

I worked on HashiCorp Vault integration because it requred in prod.

Type of change:

  • Improvement

Checklist:

  • I have read the CONTRIBUTING document.
  • I have commented on my code, particularly in hard-to-understand areas.
  • For JSON Schema changes: I updated the migration scripts or explained why it is not needed.

…ment

- Add comprehensive HashiCorp Vault credentials JSON schema with support for multiple auth methods (token, AppRole, AWS, Kubernetes, UserPass, LDAP)
- Implement Python HashiCorp Vault secrets manager using hvac library with full authentication support
- Implement Java HashiCorp Vault secrets manager for server-side operations using HttpClient
- Support both KV v1 and KV v2 secrets engines with proper path handling
- Add SSL/TLS configuration options including custom certificates and mTLS
- Update secrets manager factory classes to include HashiCorp Vault provider
- Add hvac>=1.0.0 dependency to Python ingestion setup
- Include comprehensive unit tests with mock-based Vault API testing
- Add complete documentation with setup guides, authentication examples, and troubleshooting
- Follow existing OpenMetadata patterns from Kubernetes vault implementation (PR open-metadata#22516)

Co-authored-by: openhands <openhands@all-hands.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants