Skip to content

Add support for external secrets managers from Grimoirelab-Toolkit - #669

Open
alberefe wants to merge 1 commit into
chaoss:mainfrom
alberefe:feature/add_support_credential_manager
Open

Add support for external secrets managers from Grimoirelab-Toolkit#669
alberefe wants to merge 1 commit into
chaoss:mainfrom
alberefe:feature/add_support_credential_manager

Conversation

@alberefe

Copy link
Copy Markdown

Integrate Toolkit credential_manager module so backend credentials (perceval, sortinghat) can be resolved at runtime instead of being stored in setup.cfg in plain text.

  • Add [general] secrets_manager config key (bitwarden or hashicorp) in config.py
  • Add [:credentials] subsection with item-name for per-backend opt-in in setup.cfg
  • Emit --secrets-manager and --secret-name flags from Task._compose_perceval_params, reading raw sections to avoid Config composition merging credential keys into backend params
  • Tests for config parsing and parameter composition (default item-name, parameterized backend sections, no-manager path)
  • Example fixture tests/test_credentials.cfg and commented usage in sirmordred/utils/setup.cfg
  • Added informtion in README

@alberefe
alberefe force-pushed the feature/add_support_credential_manager branch from ca1e445 to 1b64556 Compare June 24, 2026 12:21
Delegate backend credential resolution to perceval via its
--secrets-manager / --secret-name flags. Configured per backend
through a [<backend>:credentials] subsection and a [general]
secrets_manager key.

Signed-off-by: Alberto Ferrer Sánchez <alberefe@gmail.com>
@alberefe
alberefe force-pushed the feature/add_support_credential_manager branch from 1b64556 to 5fd7aa2 Compare June 25, 2026 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant