{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/111","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/111/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/111/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/111/events","html_url":"https://github.com/hashicorp/vault/issues/111","id":72119914,"number":111,"title":"Provide a way to list secrets","user":{"login":"emk","id":36963,"avatar_url":"https://avatars.githubusercontent.com/u/36963?v=3","gravatar_id":"","url":"https://api.github.com/users/emk","html_url":"https://github.com/emk","followers_url":"https://api.github.com/users/emk/followers","following_url":"https://api.github.com/users/emk/following{/other_user}","gists_url":"https://api.github.com/users/emk/gists{/gist_id}","starred_url":"https://api.github.com/users/emk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emk/subscriptions","organizations_url":"https://api.github.com/users/emk/orgs","repos_url":"https://api.github.com/users/emk/repos","events_url":"https://api.github.com/users/emk/events{/privacy}","received_events_url":"https://api.github.com/users/emk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/hashicorp/vault/labels/accepted","name":"accepted","color":"009800"},{"url":"https://api.github.com/repos/hashicorp/vault/labels/core","name":"core","color":"000000"},{"url":"https://api.github.com/repos/hashicorp/vault/labels/enhancement","name":"enhancement","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":30,"created_at":"2015-04-30T10:18:58Z","updated_at":"2015-09-01T12:03:02Z","closed_at":null,"body":"It would be really great to have some way to list the secrets stored in a Vault. This would make it easier to keep a vault clean, to document what's present, and (potentially) to export secrets to a new vault, if the configuration needs to change or if the unsealing keys need to be changed for some reason."},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/136688587","html_url":"https://github.com/hashicorp/vault/issues/111#issuecomment-136688587","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/111","id":136688587,"user":{"login":"sheldonh","id":45098,"avatar_url":"https://avatars.githubusercontent.com/u/45098?v=3","gravatar_id":"","url":"https://api.github.com/users/sheldonh","html_url":"https://github.com/sheldonh","followers_url":"https://api.github.com/users/sheldonh/followers","following_url":"https://api.github.com/users/sheldonh/following{/other_user}","gists_url":"https://api.github.com/users/sheldonh/gists{/gist_id}","starred_url":"https://api.github.com/users/sheldonh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sheldonh/subscriptions","organizations_url":"https://api.github.com/users/sheldonh/orgs","repos_url":"https://api.github.com/users/sheldonh/repos","events_url":"https://api.github.com/users/sheldonh/events{/privacy}","received_events_url":"https://api.github.com/users/sheldonh/received_events","type":"User","site_admin":false},"created_at":"2015-09-01T12:03:02Z","updated_at":"2015-09-01T12:03:02Z","body":"I don't think this needs to be complicated.\r\n\r\n# Declarative\r\n\r\nI don't think this needs to be complicated.\r\n\r\n*Declarative*\r\n\r\nAs a security officer\r\nI want to enumerate secrets\r\nIn order to audit secrets.\r\n\r\n* Imperative* \r\n\r\nGiven secret enumeration is enabled\r\nAnd I have a root token\r\nWhen request a list of secret paths matching an optionally wildcarded path\r\nThen I see a list of matching secret paths.\r\n\r\nThe wildcarding can (and I think should) follow the rules used for policies.\r\n\r\nI think that getting cute with fine-grained access control is asking for trouble.\r\n"}}