Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Automatic un-sealing with IBM Key Protect #6594

Open
tomwganem opened this issue Apr 16, 2019 · 7 comments
Open

Feature Request: Automatic un-sealing with IBM Key Protect #6594

tomwganem opened this issue Apr 16, 2019 · 7 comments
Labels
community-sentiment Tracking high-profile issues from the community core/seal enhancement

Comments

@tomwganem
Copy link

tomwganem commented Apr 16, 2019

Is your feature request related to a problem? Please describe.
I would like to utilize IBM Key Protect to run vault with auto-unseal enabled in a kubernetes cluster in IBM Cloud.

Describe the solution you'd like
AWS, GCP, Azure and alicloud all have integrations for auto-unseal. I would like the same integration with IBM Key Protect.

Additional context
I've created https://github.com/tomwganem/keyprotect-go https://github.com/IBM/keyprotect-go https://github.com/IBM/keyprotect-go-client based off of the API available at https://console.bluemix.net/apidocs/key-protect for further exploration of this feature.

@briankassouf briankassouf added this to the near-term milestone Apr 29, 2019
@rbustami
Copy link

+1 for this feature request

@tomwganem
Copy link
Author

tomwganem commented Nov 7, 2019

Hello,

I've gone ahead and made a more official golang library in https://github.com/IBM/keyprotect-go https://github.com/IBM/keyprotect-go-client

@luizgn
Copy link

luizgn commented Sep 25, 2020

Hi, I have submitted a PR #23 to add support for IBM Key Protect on go-kms-wraping. Can someone review please?

@heatherezell heatherezell removed this from the triaged milestone Jan 18, 2022
@heatherezell heatherezell added the community-sentiment Tracking high-profile issues from the community label Jan 18, 2022
@maxdebayser
Copy link

Hi there, this feature would be welcome for some projects I'm working on. Is there anything I could do to help?

@cassiasamp
Copy link

Hi everyone, this would indeed help.
Any updates on merging the feature @hsimon-hashicorp :) ?

@motyd
Copy link

motyd commented Nov 15, 2022

Is there any update on this item?
It has been open for a few years now without much attention.

@heatherezell
Copy link
Contributor

Hi folks! At this time, we recommend people create or use a PKCS#11 library for auto-unseal with IBM Cloud. I will leave this open for internal tracking purposes. Thanks for your enthusiasm!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
community-sentiment Tracking high-profile issues from the community core/seal enhancement
Projects
None yet
Development

No branches or pull requests

10 participants