- Notifications
You must be signed in to change notification settings - Fork928
Open
Description
Extracted from#11084 (comment) Probably depends on#11084
For vault we may look into as becoming one of the supportedauth methods
More details:https://developer.hashicorp.com/vault/docs/concepts/auth
I think our flow can work best similar toGitHub auth method. Where we pre-configure vault with a Coder OAuth app and then can login simply
With
vault login -method=coder token=$CODER_SESSION_TOKEN
Reference:https://developer.hashicorp.com/vault/docs/auth/github
Use case(s)
- We can build a new module that automatically authenticates each coder workspace with vault without involving any 3rd party. We currently have avault module that depends on GitHub auth.
- Could also help realizeUser-level secrets #7087 by using Vault as the backend.