search

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management
https://www.vaultproject.io/
Other
30.94k stars 4.18k forks source link

Feature Request: Automatic un-sealing with IBM Key Protect #6594

Open tomwganem opened 5 years ago

tomwganem commented 5 years ago

Is your feature request related to a problem? Please describe. I would like to utilize IBM Key Protect to run vault with auto-unseal enabled in a kubernetes cluster in IBM Cloud.

Describe the solution you'd like AWS, GCP, Azure and alicloud all have integrations for auto-unseal. I would like the same integration with IBM Key Protect.

Additional context I've created ~https://github.com/tomwganem/keyprotect-go~ ~https://github.com/IBM/keyprotect-go~ https://github.com/IBM/keyprotect-go-client based off of the API available at https://console.bluemix.net/apidocs/key-protect for further exploration of this feature.

rbustami commented 5 years ago

+1 for this feature request

tomwganem commented 4 years ago

Hello,

I've gone ahead and made a more official golang library in ~https://github.com/IBM/keyprotect-go~ https://github.com/IBM/keyprotect-go-client

luizgn commented 4 years ago

Hi, I have submitted a PR #23 to add support for IBM Key Protect on go-kms-wraping. Can someone review please?

maxdebayser commented 2 years ago

Hi there, this feature would be welcome for some projects I'm working on. Is there anything I could do to help?

cassiasamp commented 2 years ago

Hi everyone, this would indeed help. Any updates on merging the feature @hsimon-hashicorp :) ?

motyd commented 1 year ago

Is there any update on this item? It has been open for a few years now without much attention.

heatherezell commented 1 year ago

Hi folks! At this time, we recommend people create or use a PKCS#11 library for auto-unseal with IBM Cloud. I will leave this open for internal tracking purposes. Thanks for your enthusiasm!