documentation for group/project level secret mount installment
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
- Issue type
- Documentation
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- gitlab, go
- Domain
- authorization, documentation, security
Research direction
No files or tests are named. Start by locating the secret-mount implementation and its existing authorization tests, then exercise group-maintainer and project-maintainer tokens. Done means the supported scopes are tested and documented, including access to projects within the group and denial for projects outside it.
Written by the indexing model from the issue text.
Description
I've tested at instance level where an admin token is used. This allows to create project access token for any projects.
For SaaS or limited use, this secret mount should work for
- group maintainer or higher access token for projects under a group
- project maintainer or higher access token for a project
We'll need to test and document that situation where group maintainer token is used. it should be able to create project access token for projects under the group. it shouldn't be able to create project access token for a project outside of the group where the token configured in plugin doesn't have access to.
- Dominant language
- Go
- Stars
- 63
- Forks
- 12
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from splunk/vault-plugin-secrets-gitlab
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Templated policiesOpen
Difficulty 4/5 3-5 days Newbie friendliness 25/100
-
Difficulty 3/5 1-2 days Newbie friendliness 42/100
splunk/vault-plugin-secrets-gitlab#117 · 1 reaction ·
-
Difficulty 3/5 1-2 days Newbie friendliness 38/100
splunk/vault-plugin-secrets-gitlab#111 · 1 comment ·
-
support for group level access tokenPossibly taken @M0roSan claimed this 1701 days ago. Openenhancement
Difficulty 3/5 1-2 days Newbie friendliness 35/100
splunk/vault-plugin-secrets-gitlab#36 · 6 comments · 1 reaction ·
All issues in splunk/vault-plugin-secrets-gitlab
Similar issues
-
bug needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
ClickHouse/clickhouse-go#2124 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
evener-transcript-v2-upgrade tool still scans transcript files through bufio's 4 KiB default bufferOpen
Difficulty 1/5 Under an hour Newbie friendliness 78/100
prime-radiant-inc/evener#6370 ·
Maintainers usually reply within 1 day
-
ManageSieve proxy: a backend's NO/BYE greeting is skipped as a capability line and reported as EOFOpenbug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Mend: dependency security vulnerability
Difficulty 2/5 1-3 hours Newbie friendliness 65/100