Skip to content
GitLab
Next
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • GitLab GitLab
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 44,763
    • Issues 44,763
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 1,328
    • Merge requests 1,328
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.orgGitLab.org
  • GitLabGitLab
  • Issues
  • #255619
Closed
Open
Issue created Sep 24, 2020 by Jackie Porter@jreporterDeveloper

Support Vault EE Namespaces with JWT via YAML configuration

Problem to solve

GitHub currently supports namespace specifications for Vault Enterprise. GitLab needs to be able to expand the BYOV instance to support Namespaces in Vault

https://github.com/marketplace/actions/vault-secrets#vault-enterprise-features

Proposal

Update the detailed syntax to support new optional namespace parameter, for example:

  secrets:
    SSL_PRIVATE_KEY:
      vault:
        namespace: infrastructure
        engine:
          name: kv-v2
          path: aws
        path: gitlab-test/ssl
        field: private-key

and pass it to Runner to use when authenticating / reading secrets.

Reference documentation: https://www.vaultproject.io/docs/enterprise/namespaces.

Additional notes

Within !80590 (merged), support for Vault EE Namespaces with JWT is already in place via a CI variable.

This issue will implement a YAML configuration to support Vault EE Namespaces with JWT.

Edited Mar 11, 2022 by Mark Nuzzo
Assignee
Assign to
Time tracking