[Feature]: Configure datasource credentials with Hashicorp Vaults

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.

https://www.appsmith.com

Apache License 2.0

34.67k stars 3.75k forks source link

[Feature]: Configure datasource credentials with Hashicorp Vaults #33362

Open LagunaElectric opened 6 months ago

LagunaElectric commented 6 months ago

Is there an existing issue for this?

[X] I have searched the existing issues

Summary

As a developer I would like to use external providers like Hashi Vaults to provide credentials for my datasources.

Why should this be worked on?

Currently we are adding these keys manually which is exposing the keys and our infra team is not happy about it. Allowing us to configure the datasource using an external provider like Vaults would eliminate the security risk of exposing the keys.

harishnvh commented 6 months ago

Hashi vault integration is one of the requirement but the current request is to find ways to integrate external vaults to Workspace data source configuration in the appsmith.

For example, I am trying to add s3 bucket and dynamodb aws credentials to appsmith workspace. Right now, only option I have is to manually login to appsmith UI and edit the workspace data sources to add the keys.

infinitetrooper commented 6 months ago

@harishnvh - Does the requirement come from an internal company policy around the rotation of keys? I'd like to understand your setup a little bit more for us to make the right decisions around this.