FR: Hashicorp Vault Token File Environment Variable`
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 23.1k
- Forks
- 1.1k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 9
Description
Building on the context #2162 I'd Like to propose the addition of an environment variable for HashiCorp Vault Token files.
Why
because relying on the default ~/.vault-token location limits flexibility in automated or strictly secure environments. This would allow SOPS to read Vault tokens from file descriptors and different paths, which would improve support for ephemeral secret injection and read-once tokens overall.
I am currently working on a PR to implement this and will link it here shortly
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read the context in issue #2162 and inspect the existing HashiCorp Vault token-file handling. Confirm the proposed environment variable's behavior for alternate paths and file descriptors; done means SOPS can use those token sources instead of only ~/.vault-token.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100