Skip to content

Feature/hashicorp vault ssh keybased authentication - #46557

Open
rhermida wants to merge 6 commits into
demisto:contrib/rhermida_feature/hashicorp-vault-ssh-keybased-authenticationfrom
rhermida:feature/hashicorp-vault-ssh-keybased-authentication
Open

rhermida wants to merge 6 commits into
demisto:contrib/rhermida_feature/hashicorp-vault-ssh-keybased-authenticationfrom
rhermida:feature/hashicorp-vault-ssh-keybased-authentication

Conversation

@rhermida

@rhermida rhermida commented Nov 11, 2026 •

Copy link
Copy Markdown

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

Changes that allow for SSH key-based authentication.  When enabled, SSH keys are fetched via the "username" and "sshkey" fields from HashiCorp Vault secrets and maps the SSH key to the Certificate field of the XSOAR credential.
Changes that allow for SSH key-based authentication.  When enabled, SSH keys are fetched via the "username" and "sshkey" fields from HashiCorp Vault secrets and maps the SSH key to the Certificate field of the XSOAR credential.
@CLAassistant

CLAassistant commented Nov 11, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack labels Nov 11, 2026
@content-bot
content-bot changed the base branch from master to contrib/rhermida_feature/hashicorp-vault-ssh-keybased-authentication November 11, 2026 05:31
@content-bot
content-bot requested a review from kamalq97 November 11, 2026 05:31
@content-bot

Copy link
Copy Markdown
Contributor

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @kamalq97 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot

Copy link
Copy Markdown
Contributor

Hi @rhermida, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

@content-bot

Copy link
Copy Markdown
Contributor

🤖 AI-Powered Code Review Available

Hi @kamalq97, you can leverage AI-powered code review to assist with this PR!

Available Commands:

  • @marketplace-ai-reviewer start review - Initiate a full AI code review
  • @marketplace-ai-reviewer re-review - Incremental review for new commits

@content-bot content-bot added Community Contribution Form Filled Whether contribution form filled or not. labels Nov 11, 2026
@MosheEichler

Copy link
Copy Markdown
Contributor

Hi @rhermida, Thank you for your contribution! Good work :)

Before we can start the review, the following items are missing from the PR:

  1. Release notes - Add a release notes file for the new version: Packs/HashiCorp-Vault/ReleaseNotes/1_1_43.md, describing the new Using SSH Key Authentication parameter. You can generate it with demisto-sdk update-release-notes -i Packs/HashiCorp-Vault -u revision.
  2. Pack version bump - Update currentVersion in Packs/HashiCorp-Vault/pack_metadata.json to 1.1.43 (the command above does this for you).
  3. README - Document the new Using SSH Key Authentication parameter in the instance configuration table in Packs/HashiCorp-Vault/Integrations/HashiCorpVault/README.md, including the expected secret format (username and sshkey fields).
  4. Unit tests - Add tests to HashiCorpVault_test.py covering:
    • parse_ssh_key_secret (with and without concat_username)
    • parse_legacy_secret
    • The KV1 / KV2 / CyberArk-hash fetch paths, with the SSH key option enabled and disabled, including a secret that does not contain both username and sshkey (falls back to the legacy parsing).
  5. Formatting and validation - Run demisto-sdk format -i Packs/HashiCorp-Vault/Integrations/HashiCorpVault and demisto-sdk pre-commit -i Packs/HashiCorp-Vault/Integrations/HashiCorpVault and fix any issues reported.
  6. PR status - The PR description is currently marked as In Progress. Once the above is done, please mark it as Ready and check the Tests and Documentation boxes.

Please feel free to reach out to me with any questions — I'm available here or on Slack :) Thanks again

Bump up version number
Documenting of the new Using SSH Key Authentication parameter in the instance configuration, including the expected secret format (username and sshkey fields).
Release notes for the new version
13 new unit tests as requested

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! External PR Xsoar Support Level Indicates that the contribution is for XSOAR supported pack

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants