A database driver for Django to connect to an Informix db via ODBC, obtaining the credentials from Hashicorp Vault
Project description
Extends the database driver for Django django_informixdb to retrieve credentials from a Hashicorp Vault service.
Assumptions
This driver expects the credentials to be stored in a KV v2 secret in Vault, as keys username and password.
Supported Authentication
Two methods, with highest priority first: - K8s JWT - Basic Token
Settings Required
Do not provide USER and PASSWORD. Instead provide these settings:
Setting |
Required |
Description |
---|---|---|
VAULT_ADDR |
Yes |
The HTTPS endpoint for Vault |
VAULT_PATH |
Yes |
The path in Vault to the KV v2 secret storing the Informix credentials |
VAULT_K8S_AUTH_MOUNT_POINT |
No |
The Vault mount point to use for Kubernetes authentication, default value: kubernetes |
VAULT_K8S_JWT |
No |
The path to the JWT in a K8s container, default vault: /var/run/secrets/kubernetes.io/serviceaccount/token |
VAULT_K8S_ROLE |
Conditional |
Provide the K8s role if using K8s JWT authentication to Vault |
VAULT_KVV2_MOUNT_POINT |
No |
The Vault mount point to use for KVv2 secrets, default value: secret |
VAULT_TOKEN |
Conditional |
Provide the token if using basic token authentication to Vault |
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Hashes for django_informixdb_vault-0.4.1.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 0f771e98c6e7e0b5965910a43946d43831254f3adc10423ef905800f6a6c4a3f |
|
MD5 | 51195ce55029781d856be5dc8c1ab26d |
|
BLAKE2b-256 | da5e16f24f33da40462a93ef4d7b8aae28ffc62cb4541cd2dc19070f24bafa6f |