Can Jira 7.7 be configured to work with Hashicorp Vault for Passwords?

[DavidEBelanger]

We are being forced to use Hashicorp Enterprise Vault (EVA) to store the database login credentials. It seems that they are currently stored in dbconfig.xml. Is it possible to get Jira Server working with a credentials vault?

[Anubhav Dutt]

Hi David,

Thanks a lot for bringing this up. We are actively exploring potential solutions that ensure password obfuscation in the DB configuration files one of which is Hashicorp EVA. I will be in a position to share more updates on the solution soon.

Would you mind sharing in your usage of secret managers like Hashicorp EVA how often do you use multiple fields in one secret?

In the meantime do lookout for updates regarding this request.

Thanks Again!!

[DavidEBelangerUBS]

Hi, We are just getting back to this now. With Hashicorp EVA each account is kept in separate nodes within EVA, so there is only one credential per account. There are two methods of usage. The first is deploy time usage where the password is fetched on code deployments. This is how we are using it. The second method is on runtime where the credentials are fetched on every call.

 We have three accounts that need EVA integration.

1. To authenticate with LDAP for user role lookup.

2. To authenticate with the email server to send emails.

3. Connect to an external Oracle database that is not part of the Jira installation.