-
Notifications
You must be signed in to change notification settings - Fork 44
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature Request: Item Files #132
Labels
enhancement
New feature or request
Comments
Thanks for raising!👍 We'll consider this for future releases! |
asgeirn
added a commit
to asgeirn/terraform-provider-onepassword
that referenced
this issue
Apr 29, 2024
Implemented in #161 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Summary
The ability to create, delete, read and list files attached to an item
Use cases
As part of automation, we obtain certificates from a certificate vendor. However, we need to store the private key in a secure location. The certificate vendor cannot access the private key at any point. We also need to keep the public key and certificate chain. We often store that information on the host (if the certificates are tied to a specific host) or in its own item when the domain is broad.
Later on, when we provision infrastructure, we need to retrieve the certificates to add them to hosts etc securely.
Proposed solution
Introduce a new data source and resource:
Also introduce a data source to retrieve all files attached to an item, which returns its metadata (name etc), but not the contents
The reason this is separate is because their lifecycle may be different than that of the item they belong to. For example, the public key of a certificate or a license file for a given host may change every year, while the item they belong to remains untouched.
Is there a workaround to accomplish this today?
References & Prior Work
For the "pattern" see the following:
Data Sources:
Resources:
Implementation:
The text was updated successfully, but these errors were encountered: