search

hashicorp / vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.
MIT License
442 stars 140 forks source link

Import secrets matching regex/glob pattern #336

Open rafiksargsyan opened 2 years ago

rafiksargsyan commented 2 years ago

Is your feature request related to a problem? Please describe. When there are many secrets one has to add them one by one, which is not only inconvenient but also pollutes the GitHub workflow files.

Describe the solution you'd like Allow importing secrets using regex/glob pattern. For example to specify secrets for the dev environment one could import secrets using the "DEV_*" pattern.

austingebauer commented 11 months ago

Hi @rafiksargsyan - I want to confirm that you're asking for something like the following which builds on wildcard multiple secret support at the key-value level:

with:
    secrets: |
        secret/data/ci/aws DEV_* | MYAPP_ ;

This seems like a reasonable request if that's the case. If you're asking to support many secrets at the Vault KV path level (for example, secret/data/ci/*), then I don't think it's something we can do with Vault today.