apache / airavata-mft

Apache Airavata Managed File Transfer Services
https://airavata.apache.org
Apache License 2.0
32 stars 39 forks source link

Vault backend support to Secret Service #107

Open DImuthuUpe opened 1 year ago

DImuthuUpe commented 1 year ago

Secret service contains a pluggable security backend framework and currently, it was implemented to support database-backed storage [1]. However, this is not recommended for production usage as credentials are saved in plain text. Vault [2] is a very popular credential storage tool and it is better if we can have backend implementation to support credential storage in vault

[1] https://github.com/apache/airavata-mft/tree/master/services/secret-service/server/src/main/java/org/apache/airavata/mft/secret/server/backend [2] https://www.vaultproject.io/

nandarshan commented 1 year ago

I'm working on this issue. PR: https://github.com/apache/airavata-mft/pull/109