Skip to content

feat: Add HashiCorp Vault integration for OpenMetadata secrets manage…#1

Open
spomytkin wants to merge 1 commit into
spomytkin:mainfrom
spdev2025:feature/hashicorp-vault-secrets-manager
Open

feat: Add HashiCorp Vault integration for OpenMetadata secrets manage…#1
spomytkin wants to merge 1 commit into
spomytkin:mainfrom
spdev2025:feature/hashicorp-vault-secrets-manager

Conversation

@spomytkin

@spomytkin spomytkin commented Sep 15, 2025

Copy link
Copy Markdown
Owner

…ment

  • Add comprehensive HashiCorp Vault credentials JSON schema with support for multiple auth methods (token, AppRole, AWS, Kubernetes, UserPass, LDAP)
  • Implement Python HashiCorp Vault secrets manager using hvac library with full authentication support
  • Implement Java HashiCorp Vault secrets manager for server-side operations using HttpClient
  • Support both KV v1 and KV v2 secrets engines with proper path handling
  • Add SSL/TLS configuration options including custom certificates and mTLS
  • Update secrets manager factory classes to include HashiCorp Vault provider
  • Add hvac>=1.0.0 dependency to Python ingestion setup
  • Include comprehensive unit tests with mock-based Vault API testing
  • Add complete documentation with setup guides, authentication examples, and troubleshooting
  • Follow existing OpenMetadata patterns from Kubernetes vault implementation (PR Fix #22511: k8s secret support for Secrets Manager open-metadata/OpenMetadata#22516)

Describe your changes:

Improvement

I worked on HashiCorp Vault integration because it requred in prod.

Type of change:

  • Improvement

Checklist:

  • I have read the CONTRIBUTING document.
  • I have commented on my code, particularly in hard-to-understand areas.
  • For JSON Schema changes: I updated the migration scripts or explained why it is not needed.

…ment

- Add comprehensive HashiCorp Vault credentials JSON schema with support for multiple auth methods (token, AppRole, AWS, Kubernetes, UserPass, LDAP)
- Implement Python HashiCorp Vault secrets manager using hvac library with full authentication support
- Implement Java HashiCorp Vault secrets manager for server-side operations using HttpClient
- Support both KV v1 and KV v2 secrets engines with proper path handling
- Add SSL/TLS configuration options including custom certificates and mTLS
- Update secrets manager factory classes to include HashiCorp Vault provider
- Add hvac>=1.0.0 dependency to Python ingestion setup
- Include comprehensive unit tests with mock-based Vault API testing
- Add complete documentation with setup guides, authentication examples, and troubleshooting
- Follow existing OpenMetadata patterns from Kubernetes vault implementation (PR open-metadata#22516)

Co-authored-by: openhands <openhands@all-hands.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants