search

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management
https://www.vaultproject.io/
Other
30.96k stars 4.18k forks source link

Shared Namespaces #10253

Open venky999 opened 3 years ago

venky999 commented 3 years ago

Is your feature request related to a problem? Please describe. Support shared namespaces and support policies for these namespaces to be access from other namespaces

Describe the solution you'd like

Let's say we have 4 Top Level Namespaces root, A, B, C and 3 Applications X,Y,Z and assume that they use AWS/Azure/GCP Auth. AppX can access namespace A, AppY can access namespace B, AppZ can access namespace C. Now Let's say AppB wants to share a secret to AppA and AppC. What would be the pattern in that case, Having shared namespaces where other namespaces can access secrets from the shared namespaces would be good. It would be good to document if we have a solution already

swayne275 commented 3 years ago

To clarify on: "AppX can access namespace A, AppY can access namespace B, AppZ can access namespace C. Now Let's say AppB wants to share a secret to AppA and AppC."

Does AppB==AppY, AppA==AppX, and AppC==AppZ (translating from the second sentence to the first), or did I misunderstand?

venky999 commented 3 years ago

Yes ..sorry for confusion