hashicorp / hashicorp/boundary

More Variables available to -exec flag

Open
#4,591 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
4.1k
Forks
317
Avg merge
5h 10m
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**
When credential injection works, it's really awesome. However, it has a very limited feature set right now (namely, SSH). It would be cool to be able to inject credentials on more connections

**Describe the solution you'd like**
Until Boundary gets native support for credential injection for other apps, it might be cool to get brokered credentials in a set of variables you can pass to -exec along with the connection info you presently get. Then, you could run any client program you want that accepts credentials on the command line, or execute any script with those variables as arguments to do whatever you want.

Alternately, if there was a way to write local connection helpers, that would be cool too as long as the required info (host,port,user,pass) are available to the helper. Maybe like #2454 which would also solve the problem

**Describe alternatives you've considered**
I'm considering writing a script that brokers the credentials for me from Vault instead of asking boundary to do it. This would work, I think, but isn't great UX.

**Explain any additional use-cases**
Any use case where I'm trying to get simulate credential injection in lieu of boundary natively supporting it.

**Additional context**
Add any other context or screenshots about the feature request here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.