Skip to content

Enable namespace functionality in the Vault Keyring Component - #6122

Closed
jstack-godaddy wants to merge 2 commits into
percona:8.4from
jstack-godaddy:8.4
Closed

Enable namespace functionality in the Vault Keyring Component#6122
jstack-godaddy wants to merge 2 commits into
percona:8.4from
jstack-godaddy:8.4

Conversation

@jstack-godaddy

@jstack-godaddy jstack-godaddy commented Aug 6, 2026

Copy link
Copy Markdown

On-prem OpenBao at my company was requiring I use a namespace for where I store the keys that the keyring_vault component was talking to. The plugin doesn't allow for working in a namespace. After these updates I was successful in authenticating and managing my encryption keys.

mysql> SELECT * FROM performance_schema.keyring_component_status;
+----------------------------+--------------------------------------------------+
| STATUS_KEY                 | STATUS_VALUE                                     |
+----------------------------+--------------------------------------------------+
| Component_name             | component_keyring_vault                          |
| Author                     | Percona Corporation                              |
| License                    | GPL                                              |
| Implementation_name        | component_keyring_vault                          |
| Version                    | 1.0                                              |
| Component_status           | Active                                           |
| timeout                    | 15                                               |
| vault_url                  | https://REDACTED |
| secret_mount_point         | REDACTED_kv-v2                              |
| vault_ca                   | /etc/pki/ca-trust/source/anchors/vault-chain.crt |
| secret_mount_point_version | AUTO                                             |
| vault_namespace            | percona                                          |
+----------------------------+--------------------------------------------------+
12 rows in set (0.00 sec)

mysql> ALTER INSTANCE ROTATE INNODB MASTER KEY;
Query OK, 0 rows affected (0.03 sec)

-----

]# cat /usr/lib64/mysql/plugin/component_keyring_vault.cnf
{
  "timeout": 15,
  "vault_url": "https://REDACTED",
  "secret_mount_point": "REDACTED_kv-v2",
  "secret_mount_point_version": "AUTO",
  "token": "REDACTED",
  "vault_ca": "/etc/pki/ca-trust/source/anchors/vault-chain.crt",
  "vault_namespace": "percona"
}
Screenshot 2026-08-06 at 2 54 56 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant