Integration of hashicorp-vault-pipeline-plugin

[jetersen]

No description provided.

[rcomanne]

Any update on this PR? What is required to merge this?

[jetersen]

I was exploring how to properly hide secrets 😓

[rcomanne]

I was exploring how to properly hide secrets 😓

Ah okay, I did some quick testing with that as well, but it seemed like it requires a complete rewrite of the current step, as the others I have found, are all build wrappers so they keep control over the context, while our step just injects some values in the environment.
It is possible to combine this step with the withCredentials wrapper that will hide the secrets, so that is how we use the plugin atm.
I did not see a better quick way to implement this, so good luck and looking forward to how you'll solve this!

[rcomanne]

Hi @Casz, any updates on this PR? Are we still waiting on masking passwords?
We can still use the functionality, users will just have to use the MaskPasswords plugin.

Edit: I just saw there are quite a few changes to VaultAccessor - so I do not think PR will work when merged right now.

[timja]

In azure-keyvault plugin I used a block scoped step not the environment option and secrets were hidden fine:
https://github.com/jenkinsci/azure-keyvault-plugin#declarative

[ghost]

Any updates for these changes? The current https://github.com/jenkinsci/hashicorp-vault-pipeline-plugin is broken

[jetersen]

No longer relevant after #174

Use withVault

[ghost]

Thanks @jetersen, I didn't know #174 was an option!

If anyone finds this in the future, the PR above makes the withVault syntax mask credentials for pipelines.

Usage docs: https://www.jenkins.io/doc/pipeline/steps/hashicorp-vault-plugin
Example from README.md: https://github.com/jenkinsci/hashicorp-vault-plugin#usage-via-jenkinsfile