approle: do not require secret_id (#522)
* approle: support bind_secret_id * add changelog
This commit is contained in:
committed by
GitHub
parent
d1720f055e
commit
a727ce205a
@@ -1,5 +1,9 @@
|
|||||||
## Unreleased
|
## Unreleased
|
||||||
|
|
||||||
|
Features:
|
||||||
|
|
||||||
|
* `secretId` is no longer required for approle to support advanced use cases like machine login when `bind_secret_id` is false. [GH-522](https://github.com/hashicorp/vault-action/pull/522)
|
||||||
|
|
||||||
## 3.0.0 (February 15, 2024)
|
## 3.0.0 (February 15, 2024)
|
||||||
|
|
||||||
Improvements:
|
Improvements:
|
||||||
|
|||||||
@@ -17,7 +17,7 @@ async function retrieveToken(method, client) {
|
|||||||
switch (method) {
|
switch (method) {
|
||||||
case 'approle': {
|
case 'approle': {
|
||||||
const vaultRoleId = core.getInput('roleId', { required: true });
|
const vaultRoleId = core.getInput('roleId', { required: true });
|
||||||
const vaultSecretId = core.getInput('secretId', { required: true });
|
const vaultSecretId = core.getInput('secretId', { required: false });
|
||||||
return await getClientToken(client, method, path, { role_id: vaultRoleId, secret_id: vaultSecretId });
|
return await getClientToken(client, method, path, { role_id: vaultRoleId, secret_id: vaultSecretId });
|
||||||
}
|
}
|
||||||
case 'github': {
|
case 'github': {
|
||||||
|
|||||||
Reference in New Issue
Block a user