hashicorp / hashicorp/vault-action
[FEAT] Support IAM / EC2 auth methods
- Dominant language
- JavaScript
- Stars
- 513
- Forks
- 166
- Avg merge
- 6d 4h
- Merged PRs (30d)
- 1
Description
**Is your feature request related to a problem? Please describe.**
I have private github runners in AWS that already have an instance profile. Calls to vault should be able to leverage that instance profile role or another assumed role to auth.
**Describe the solution you'd like**
An additional authentication method in this action code that supports vault AWS auth options.
**Describe alternatives you've considered**
Use sts assume role and vault cli commands to retrieve the secrets in a bash script.
**Additional context**
https://www.vaultproject.io/docs/auth/aws
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the action's existing authentication methods and the linked Vault AWS authentication documentation. Define support for authenticating with an EC2 instance profile or an assumed role, then verify that the GitHub Action can retrieve Vault secrets through the selected AWS auth option.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, github-actions, javascript
- Domain
- authentication, cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100