ekuiper icon indicating copy to clipboard operation
ekuiper copied to clipboard

Proposal: Support get secrets from Vault

Open yai-dev opened this issue 1 year ago • 3 comments

What would you like to be added/modified: Support for Source and Sink plugins to retrieve sensitive data such as usernames and passwords from Vault, enhancing the security of secret data.

Why is this needed: Vault is a powerful secret management solution that supports centralized management of secret data, providing features such as dynamic secrets, access control, encryption and decryption, and auditing. Compared to storing secrets in local files, it offers enhanced security.

FYI:https://www.vaultproject.io/

yai-dev avatar Aug 14 '23 06:08 yai-dev

As we discussed in the WeChat group, we can try to integrate eKuiper with EdgeX Foundry's Secret Store (a.k.a Vault). I can try it under my fork, and this proposal does not have high priority.

yai-dev avatar Aug 14 '23 06:08 yai-dev

Since HashiCorp change their open source license https://www.hashicorp.com/license-faq#aug-10-announcement, it is now not a good idea to depend on vault. How do you think?

ngjaying avatar Aug 29 '23 03:08 ngjaying

Since HashiCorp change their open source license https://www.hashicorp.com/license-faq#aug-10-announcement, it is now not a good idea to depend on vault. How do you think?

Agreed, I dont think the Vault is our 1st option anymore :(

yai-dev avatar Sep 02 '23 07:09 yai-dev