I previously posted this:
@aram, that’s a database plugin which is completely different to a secrets plugin and is not relevant to this use case.
and members of the community flagged the post as off-topic, leading it to be hidden.
If people disagree with something I’ve said, I’d encourage discussing it rather than seeking to have the system suppress my post. (Which, as a factual correction to the issue being discussed, is not off-topic.)
However, I do admit I could have explained at greater length, and my earlier post could have been misunderstood. I shall give more details:
Vault has three kinds of plugin:
- auth
- secrets
- database
If someone wanted to implement a plugin to create and return Grafana or GitLab API keys on the fly, the relevant kind of plugin to look into is “secrets”.
The mysql plugin is of “database” type, and so is not a good example to start with, as the Vault APIs involved are different.