Skip to content

Add secrets manager integration for credential retrieval#887

Closed
alberefe wants to merge 1 commit intochaoss:mainfrom
alberefe:credential-manager-integration
Closed

Add secrets manager integration for credential retrieval#887
alberefe wants to merge 1 commit intochaoss:mainfrom
alberefe:credential-manager-integration

Conversation

@alberefe
Copy link
Copy Markdown

Summary

  • Add support for retrieving backend credentials from external secrets managers (Bitwarden, HashiCorp Vault) instead of passing them on the command line
  • Credentials are fetched in BackendCommand._pre_init() and injected into parsed_args (user, password, api_token, email, etc.), which backends already consume via HTTP headers/session auth
  • Enable secrets manager arguments (--secrets-manager, --item-name, --token-field, etc.) across 14 backends: bugzilla, bugzillarest, confluence, discourse, gerrit, git, github, gitlab, gitter, googlehits, groupsio, jenkins, rocketchat,
    stackexchange
  • Add optional hashicorp-manager dependency group (hvac >= 2.3.0) in pyproject.toml
  • Add documentation in README with usage examples for Bitwarden and HashiCorp Vault
  • Add tests for the included functionality

@alberefe alberefe force-pushed the credential-manager-integration branch 2 times, most recently from 0a86462 to 66a1791 Compare February 26, 2026 15:20
Copy link
Copy Markdown
Member

@sduenas sduenas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks promising. My main concern is that this only works using perceval from the command line and not as library. chronicler and mordred are two examples of perceval used as a library.

I think it would be better if perceval handles the access to the credentials on the backend and not in the backend command. What do you think?

Signed-off-by: Alberto Ferrer Sánchez <alberefe@gmail.com>
@alberefe alberefe force-pushed the credential-manager-integration branch from 66a1791 to 1a67e29 Compare March 2, 2026 10:36
@alberefe alberefe closed this Mar 2, 2026
@alberefe
Copy link
Copy Markdown
Author

alberefe commented Mar 2, 2026

Closed it cause I'm making changes to adapt to what you said, also including changes to toolkit to modularize the functions and make it so the changes to perceval and others are minimal and everything stays inside toolkit as much as possible.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants