Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add github authentication #74

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Conversation

r00ta
Copy link

@r00ta r00ta commented Sep 2, 2022

STILL WIP - Early feedback is more than welcome: i.e. if this feature is a nice to have for the project I'm happy to move on with the integration tests. I've already tested it locally and it works fine.

Relates to #73

This PR aims to provide GitHub as authentication mechanism for the vault.

@r00ta
Copy link
Author

r00ta commented Sep 2, 2022

Hi @vsevel @sberyozkin @kdubb , any thoughts on this?

Copy link
Contributor

@vsevel vsevel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good. a few minor changes and comments.
yes, let's try to expand the tests if possible.

@@ -271,6 +271,16 @@ echo token=$token
kubectl get secret $secret_name -o json | jq -r '.data."ca.crt"' | base64 -D > /tmp/ca.crt
----

== GitHub Authentication
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you can add a bullet point in the list given at the beginning.

@@ -34,6 +34,15 @@
"code",
"maintenance"
]
},
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need to add this as part of the PR @gastaldi ?

Copy link
Member

@gastaldi gastaldi Sep 15, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, please add it in a separate PR using the @all-contributors add @r00ta for code command (which can be triggered by a comment in this PR)

@@ -271,6 +271,16 @@ echo token=$token
kubectl get secret $secret_name -o json | jq -r '.data."ca.crt"' | base64 -D > /tmp/ca.crt
----

== GitHub Authentication

The GitHub authentication rely on a token with the `admin:org->read:org` scope generated from https://github.com/settings/tokens/new.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: relies

public class VaultGitHubAuthenticationConfig {

/**
* Token for GitHub auth method. This property is required when selecting the github authentication type.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't choose, do we? it is implicit when we set this attribute. correct?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants