Send a credential from credential vault to extension configuration

[Benji_Dynatrace]

Hi, 

Title is pretty self-explanatory. I am looking for a way to use the credential vault to fill in a configuration entry so that we can prevent a password leak or something like that. Right now the text entries don't seem to provide a way to reference an item in the credential vault, unless I am wrong. If there isn't a way to do this, is this something you would consider adding in the future?

Thanks,

Benji_Dynatrace

[AntonioSousa]

@Benji_Dynatrace,

Have not used this yet, but seems to be available, according to the following two threads:
https://community.dynatrace.com/t5/Product-ideas/RFE-Extend-the-use-of-Credential-Vault-to-Dynatrace...

https://community.dynatrace.com/t5/Extensions/Vaults-eg-Hashicorp-CyberArk-in-Dynatrace-extensions/m...

[Mike_L · Accepted solution]

It's up to each extension to implement such a feature. If you're missing it for a specific one which is available on the Dynatrace hub, please raise a product idea on the community forum.

When creating an extension in extension framework 2.0 it's possible to add credential vault support to the activation schema using this format:

"useCredentialVault": {
	"displayName": "Use credential vault",
	"type": "boolean",
	"nullable": false,
	"default": true,
	"maxObjects": 1
},
"credentialVaultId": {
	"displayName": "Select Vault credentials",
	"nullable": true,
	"type": "text",
	"subType": "credential",
	"referencedType": "USERNAME_PASSWORD",
	"maxObjects": 1,
	"precondition": {
		"type": "EQUALS",
		"property": "useCredentialVault",
		"expectedValue": true
	},
	"constraints": [
		{
			"type": "NOT_BLANK"
		}
	]
},
"username": {
	"displayName": "User Name",
	"type": "text",
	"nullable": false,
	"default": "",
	"precondition": {
		"type": "EQUALS",
		"property": "useCredentialVault",
		"expectedValue": false
	},
	"constraints": [
		{
			"type": "LENGTH",
			"minLength": 1,
			"maxLength": 500
		}
	],
	"maxItems": 1
},
"password": {
	"displayName": "Password",
	"type": "secret",
	"nullable": false,
	"default": "",
	"precondition": {
		"type": "EQUALS",
		"property": "useCredentialVault",
		"expectedValue": false
	},
	"constraints": [
		{
			"type": "LENGTH",
			"minLength": 1,
			"maxLength": 500
		}
	],
	"maxItems": 1
}

[Benji_Dynatrace]

That's exactly it, thank you so much!

[pvr]

Hi @Mike_L , @Benji_Dynatrace ,

The above answers is oriented towards extensions developers,  not users.  What if I want to use an extension published on the extensions hub, with Vault based secrets in the configuration ?  it seems there is not type-ahead or suggest feature when I click on the text box ? e.g.  F5 Big IP extn 2.0 

 So, I say the original question still remains,  is it possible to use a specific format of intput to suggest that we are using a vault secret (similar to synthetics {} syntax) and not a plain text ? 

Please help ? 

[Mike_L]

It is only possible if the extension developer has added the above code, in which case you get a dropdown with your credential vault items.