search

hashicorp / vault-action

A GitHub Action that simplifies using HashiCorp Vault™ secrets as build variables.
MIT License
440 stars 139 forks source link

HCP support #538

Closed mihalt closed 5 months ago

mihalt commented 7 months ago

Hi! Can you give an example how to use HCP here? https://github.com/hashicorp/vault-action?tab=readme-ov-file#hashicorp-cloud-platform-or-vault-enterprise

As I see from instruction on HCP Vault website I should get token from https://auth.idp.hashicorp.com/oauth2/token with usage of HCP_CLIENT_ID and HCP_CLIENT_SECRET. And after get secrets from link https://api.cloud.hashicorp.com with usage of token.

So, do you have this functionality?

fairclothjm commented 7 months ago

@mihalt Hello! You need the correct url, namespace, and token set on the action and I think that should do it. What have you tried?

mihalt commented 6 months ago

@mihalt Hello! You need the correct url, namespeace, and token set on the action and I think that should do it. What have you tried?

have you seen their url? it is something like https://api.cloud.hashicorp.com/secrets/2023-06-13/organizations/.../projects/cf666bf8-4cfe-4545-95da-fd3fbd45cef3/apps/main-app/open

And I should generate token each time.

Also, I really don't understand what path should I use, that is required. And as I see from HCP manual, I don't need any of namespaces in request. I don't even see are they exist in it.

fairclothjm commented 6 months ago

@mihalt Hello, are you using HCP Vault or HCP Vault Secrets? What is HCP Vault Secrets?

mihalt commented 5 months ago

@mihalt Hello, are you using HCP Vault or HCP Vault Secrets? What is HCP Vault Secrets?

looks like Vault Secrets. The link in browser like this https://portal.cloud.hashicorp.com/services/secrets/apps/

fairclothjm commented 5 months ago

@mihalt Thanks for confirming. vault-action is designed to work with HCP Vault Dedicated or Vault Enterprise. There is no integration with Vault Secrets at this time.