Harbor: New Feature Request: Integration Options for Secrets Management

[slietz]

Is it possible to integrate with secrets management services/tools such as Vault in order to 1) provide for continuous deployment patterns that require frequent configuration rotations and 2) protect passwords/credentials?

[hainingzhang]

What kind of configuration or passwords/Credentails that you are looking to be rotated? Could you be more specifiic? @slietz

[slietz]

Some stacks require passwords, ssh keys, pem files, and other secrets that are good to rotate. It looks like the practice within Harbor is hard coding these items and we're wondering if they could instead be pulled from Vault or some other Secret Store.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[donovanmuller]

One particular use case this feature would be most helpful with is robot account tokens. Having these managed and rolled via Hashicorp Vault would be a great feature.