Skip to content

feat(vault): add support for Kubernetes auth method#2418

Open
eufebius wants to merge 1 commit intohairyhenderson:mainfrom
eufebius:main
Open

feat(vault): add support for Kubernetes auth method#2418
eufebius wants to merge 1 commit intohairyhenderson:mainfrom
eufebius:main

Conversation

@eufebius
Copy link

@eufebius eufebius commented Aug 6, 2025

Implements authentication to Vault using the Kubernetes auth back-end.
The method is enabled via environment variables:

  • VAULT_AUTH_K8S_ROLE
  • VAULT_AUTH_K8S_JWT_PATH (optional, default: /var/run/secrets/kubernetes.io/serviceaccount/token)
  • VAULT_AUTH_K8S_MOUNT (optional, default: "kubernetes")

Falls back gracefully if VAULT_AUTH_K8S_ROLE is not defined.

api/minor

@tombokombo
Copy link

Hi, is there any progress? Thanks

@github-actions
Copy link

github-actions bot commented Nov 1, 2025

This pull request is stale because it has been open for 60 days with
no activity. If it is no longer relevant or necessary, please close
it. Given no action, it will be closed in 14 days.

If it's still relevant, one of the following will remove the stale
marking:

  • A maintainer can add this pull request to a milestone to indicate
    that it's been accepted and will be worked on
  • A maintainer can remove the stale label
  • Anyone can post an update or other comment
  • Anyone with write access can push a commit to the pull request
    branch

@github-actions github-actions bot added the Stale label Nov 1, 2025
@fcrespel
Copy link

I too would be interested in this feature (I'd need it to generate files from Vault secrets in a K8S init container), any chance of reviewing/merging it @hairyhenderson ? Thanks.

@github-actions github-actions bot removed the Stale label Nov 11, 2025
@github-actions
Copy link

This pull request is stale because it has been open for 60 days with
no activity. If it is no longer relevant or necessary, please close
it. Given no action, it will be closed in 14 days.

If it's still relevant, one of the following will remove the stale
marking:

  • A maintainer can add this pull request to a milestone to indicate
    that it's been accepted and will be worked on
  • A maintainer can remove the stale label
  • Anyone can post an update or other comment
  • Anyone with write access can push a commit to the pull request
    branch

@github-actions github-actions bot added the Stale label Jan 10, 2026
@hairyhenderson
Copy link
Owner

Apologies for the slow response, reviewing now.

@github-actions github-actions bot removed the Stale label Jan 12, 2026
@hairyhenderson
Copy link
Owner

I've tried to rebase this but the fork repo is rejecting it (because this was issued on main).

@eufebius I'll need to ask you to rebase this first so we can get it merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants