Namespace by resource

[benashz]

This is an initial POC that adds the namespace field to all Vault resources and datasources. All namespace directives are applied relative to the provider's configured namespace. This new approach allows for namespaced resources to be created without having to specify a namespace specific provider.

More to come.

Example using for_each

provider "vault" {}

variable "namespaces" {
  default = {
    "ns-2578258393756625436" = true
    "ns-2578258393756625437" = true
    "ns-2578258393756625438" = true
    "ns-2578258393756625439" = true
  }
}

resource "vault_namespace" "ns1" {
  for_each = var.namespaces
  path     = each.key
}

resource "vault_namespace" "children" {
  for_each  = var.namespaces
  namespace = vault_namespace.ns1[each.key].path
  path      = "child-${each.key}"
}

resource "vault_mount" "v1" {
  for_each  = var.namespaces
  namespace = vault_namespace.ns1[each.key].path
  path      = "secretsv1"
  type      = "kv"
  options   = {
    version = "1"
  }
}

resource "vault_generic_secret" "test" {
  for_each  = var.namespaces
  namespace = vault_mount.v1[each.key].namespace
  path      = "${vault_mount.v1[each.key].path}/test-6085250770492118070"
  data_json = jsonencode(
    {
      "zip" = "zap"
    }
  )
}

VAULT_NAMESPACE=ns-2578258393756625436 vault kv get secretsv1/test-6085250770492118070
=== Data ===
Key    Value
---    -----
zip    zap

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request

Relates #546

Release note for CHANGELOG:

Output from acceptance testing:

$ make testacc TESTARGS='-run=TestAccXXX'

...

[FalcoSuessgott]

This is huge and would simplify my tf code base for enterprise vault a lot. Hope we can get this soon merged :)
Thanks for that POC !

[hashicorp-cla]

All committers have signed the CLA.

[vinay-gopalan]

Looks great! Had a couple questions :)

[vinay-gopalan]

Code and tests are looking great!