{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/1973","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/1973/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/1973/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/1973/events","html_url":"https://github.com/hashicorp/vault/issues/1973","id":181246238,"node_id":"MDU6SXNzdWUxODEyNDYyMzg=","number":1973,"title":"Create a vault /secret/search endpoint - search the list namespace","user":{"login":"TopherGopher","id":624717,"node_id":"MDQ6VXNlcjYyNDcxNw==","avatar_url":"https://avatars3.githubusercontent.com/u/624717?v=4","gravatar_id":"","url":"https://api.github.com/users/TopherGopher","html_url":"https://github.com/TopherGopher","followers_url":"https://api.github.com/users/TopherGopher/followers","following_url":"https://api.github.com/users/TopherGopher/following{/other_user}","gists_url":"https://api.github.com/users/TopherGopher/gists{/gist_id}","starred_url":"https://api.github.com/users/TopherGopher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TopherGopher/subscriptions","organizations_url":"https://api.github.com/users/TopherGopher/orgs","repos_url":"https://api.github.com/users/TopherGopher/repos","events_url":"https://api.github.com/users/TopherGopher/events{/privacy}","received_events_url":"https://api.github.com/users/TopherGopher/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":16,"created_at":"2016-10-05T19:39:11Z","updated_at":"2018-08-27T23:53:14Z","closed_at":null,"author_association":"NONE","body":"This endpoint would accept a GET search string and would return a JSON payload of all paths the user is authorized for where 'search string' in path name.\nThere are 2 ways to search:\n- Search all secret names/paths for the keyword\n- Search the secrets themselves for the keyword\n  For us, we only need the search to really touch the name. There's almost never an instance, for example, where you have a password and you need to search for the secret it belongs to.\n\nWe wrote a client-side application that lists all secret directories and secrets, but the amount of  recursive requests that you have to do on that end is the bottleneck for our search. Additionally, this loads all authorized secret paths into local active memory, which is...not necessarily ideal...but OK. Moving the work to the server would seem to be the best optimization.\n\nThe other feature we could settle on would be a \"recursive\" flag on the /list endpoint, which would return ALL paths that the user is authorized to see. This would still load the paths all into active memory, but then we would only need to do a single call and could search the entire namespace.\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/416405542","html_url":"https://github.com/hashicorp/vault/issues/1973#issuecomment-416405542","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/1973","id":416405542,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjQwNTU0Mg==","user":{"login":"jefferai","id":28627,"node_id":"MDQ6VXNlcjI4NjI3","avatar_url":"https://avatars0.githubusercontent.com/u/28627?v=4","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"created_at":"2018-08-27T23:53:14Z","updated_at":"2018-08-27T23:53:14Z","author_association":"MEMBER","body":"It's not that we can't discuss with users, we just don't have any good ideas right now :-)\r\n\r\nAs for priority, compared to a great many other features we have actually seen very little demand for this, so the LoE required vs. demand ratio has been rather lopsided."}}
{"actor":{"display_login":"jefferai"}}