You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
Hi, We see that there is only kv secret engine support to read static secrets from hashicorp vault. But for our workflow, we are looking to access our application's - role id and secret id from the approle authentication backend. Is there something in the works to integrate bitbucket pipelines with other vault secret backends and auth backends and allow it to read and write from any vault path?
vault read auth/approle/role/test-app/role-id
vault write -wrap-ttl=30m -f auth/approle/role/test-app/secret-id
We cannot utilize most of the functionalities from the hashicorp vault with bitbucket pipelines.
Hello @Vinoth Kumar Karuppuchamy ,
Welcome to Atlassian Community!
I'm assuming you are talking about the pipe atlassian/vault-secrets that can be used to fetch secrets from a HashiCorp vault. According to that pipe's documentation it currently only supports kv secret engine vault type.
I understand you would like to have access to other types of vault backends that are not currently included in this pipe.
After some research, I found that Hashcorp offers a command-line interface (CLI) that leverages a great part of their API functionalities, and might also offer the feature you are looking for.
You could try installing the Vault's CLI into the docker image you use in your build, and then configure the Vault CLI according to Vault's documentation. For a full list of commands available in Vault's CLI, I would suggest referring to Vault Commands (CLI).
Let me know in case you have any questions.
Thank you, @Vinoth Kumar Karuppuchamy .