5 ms·

I wonder why vault doesn't have more 3rd party tools like password managers (with browser and mobile support). For servers tools, maybe people wrote cool stuff

I wonder why vault doesn't have more 3rd party tools like password managers (with browser and mobile support). For servers tools, maybe people wrote cool stuff at work but they are not published.

politelemon 3y ago
Specifically on password managers, I've looked at it in the past as a backing store for password management, and it's mostly unsuitable. The biggest missing piece back then was lack of a search feature and the maintainers were not interested in implementing it.
- mdaniel 3y ago
  Well, lucky you, because now there's new management :-) In all seriousness, you may want to open an issue <https://github.com/openbao/openbao/issues https://github.com/openbao/openbao/issues> as they have weighed in on a few threads here saying they're open to suggestions Having implemented a reader for 1Password's "old" opvault format, I would imagine the threat model is not just searching, so it may be a heavy lift to coerce ~~Vault~~ OpenBao's mental model over into one that can be used as a consumer a password manager but I'll admit that would be pretty cool to unify vaultwarden and OpenBao into one stop shopping for all one's cryptographic needs
  - brunoqc 3y ago
    I might be a foolish dreamer, but I think a healthy community with a lot of 3rd party tools make a project even greater. Like git. It also inspires confidence for new adopters. I was often wondering with vault "why are there so few 3rd party tools? Is almost nobody using vault or people just use their own private tools". I was afraid to "invest" by using a tool that I perceived as not being popular enough and maybe have a limited future (maybe just in the 3rd party tools area)
bogota 3y ago
It’s a bit overkill for that. Although if you know how to run and set it up it does work just fine for that.
heywoodlh 3y ago
In this realm, I’ve been happily using 1Password’s Operator for Kubernetes secrets. Feel free to ignore the Nix stuff, but I’ve outlined how I create entries with the 1Password CLI: https://github.com/heywoodlh/flakes/tree/main/kube#1password-usage-with-kubernetes-operator https://github.com/heywoodlh/flakes/tree/main/kube#1password... After a OnePasswordItem is created, a secret containing your fields and their values appears. It’s marvelous! (Integrations like this are why I switched away from Bitwarden to 1Password)
- steveTheFiend 3y ago
  I went this route too for organisations in onepassword. It wasn't right, there was no way to create a password / secret only the recipient could see. The org admin can always take access through their admin rights. You can't deliver to a personal vault. If it's changed I'll look again but support couldn't understand why it wasn't acceptable. Especially when your looking at the unseal keys for vault.
dharmab 3y ago
My colleague at Adobe built one for our own use, since HashiCorp didn't provide one at the time: https://github.com/adobe/cryptr https://github.com/adobe/cryptr IIRC HashiCorp was not interested in supporting these kinds of tools because they were in direct competition with the Vault enterprise offering.
- PedroBatista 3y ago
  Fair

I wonder why vault doesn't have more 3rd party tools like password managers (with browser and mobile support). For servers tools, maybe people wrote cool stuff at work but they are not published.

politelemon 3y ago

Specifically on password managers, I've looked at it in the past as a backing store for password management, and it's mostly unsuitable. The biggest missing piece back then was lack of a search feature and the maintainers were not interested in implementing it.

mdaniel 3y ago
Well, lucky you, because now there's new management :-) In all seriousness, you may want to open an issue <https://github.com/openbao/openbao/issues https://github.com/openbao/openbao/issues> as they have weighed in on a few threads here saying they're open to suggestions Having implemented a reader for 1Password's "old" opvault format, I would imagine the threat model is not just searching, so it may be a heavy lift to coerce ~~Vault~~ OpenBao's mental model over into one that can be used as a consumer a password manager but I'll admit that would be pretty cool to unify vaultwarden and OpenBao into one stop shopping for all one's cryptographic needs
- brunoqc 3y ago
  I might be a foolish dreamer, but I think a healthy community with a lot of 3rd party tools make a project even greater. Like git. It also inspires confidence for new adopters. I was often wondering with vault "why are there so few 3rd party tools? Is almost nobody using vault or people just use their own private tools". I was afraid to "invest" by using a tool that I perceived as not being popular enough and maybe have a limited future (maybe just in the 3rd party tools area)

bogota 3y ago

It’s a bit overkill for that. Although if you know how to run and set it up it does work just fine for that.

heywoodlh 3y ago

In this realm, I’ve been happily using 1Password’s Operator for Kubernetes secrets. Feel free to ignore the Nix stuff, but I’ve outlined how I create entries with the 1Password CLI: https://github.com/heywoodlh/flakes/tree/main/kube#1password-usage-with-kubernetes-operator https://github.com/heywoodlh/flakes/tree/main/kube#1password... After a OnePasswordItem is created, a secret containing your fields and their values appears. It’s marvelous! (Integrations like this are why I switched away from Bitwarden to 1Password)

steveTheFiend 3y ago
I went this route too for organisations in onepassword. It wasn't right, there was no way to create a password / secret only the recipient could see. The org admin can always take access through their admin rights. You can't deliver to a personal vault. If it's changed I'll look again but support couldn't understand why it wasn't acceptable. Especially when your looking at the unseal keys for vault.

dharmab 3y ago

My colleague at Adobe built one for our own use, since HashiCorp didn't provide one at the time: https://github.com/adobe/cryptr https://github.com/adobe/cryptr IIRC HashiCorp was not interested in supporting these kinds of tools because they were in direct competition with the Vault enterprise offering.

PedroBatista 3y ago
Fair