apache / apache/apisix

Add support Oracle OCI Vault for Secrets Mangement

Open
#12,755 1 comment 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Lua
Stars
17.1k
Forks
2.9k
Avg merge
3d 16h
Merged PRs (30d)
63

Description

### Description

APISIX supports Vault, GCP and AWS. I'd like to see support for Oracle OCI Vault (https://docs.oracle.com/en-us/iaas/Content/KeyManagement/home.htm)

I don't think there is a Lua library available so perhaps the approacjh would be something like:

- Call the Secrets API: https://secrets.vaults..oci.oraclecloud.com
- Implement OCI request signing (this is the tricky part)
- Handle authentication with instance principals or API keys

OCI uses a specific signature format with RSA-SHA256.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the existing Vault, GCP, and AWS secret integrations in Apache APISIX to identify their entry points and tests. Then investigate the OCI Secrets API, request-signing requirements, and instance-principal or API-key authentication; done means OCI Vault secrets are supported with coverage for the selected authentication paths.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua
Domain
backend, cloud, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.