Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Proxy support through global agent bootstrap #587

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sius wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Proxy support through global agent bootstrap #587

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1c8fc1b
add proxy support through global-agent, add proxy tests, update README
sius Jul 4, 2025
d88110d
add proxy support through global-agent, add proxy tests, update README
sius Jul 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 31 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@ is not meant to modify Vault’s state.
- [KV secrets engine version 2](#kv-secrets-engine-version-2)
- [Other Secret Engines](#other-secret-engines)
- [Adding Extra Headers](#adding-extra-headers)
- [Proxy Support](#proxy-support)
- [HashiCorp Cloud Platform or Vault Enterprise](#hashicorp-cloud-platform-or-vault-enterprise)
- [Namespace](#namespace)
- [Reference](#reference)
Expand Down Expand Up @@ -502,6 +503,36 @@ with:

This will automatically add the `x-secure-id` and `x-secure-secret` headers to every request to Vault.

## Proxy Support

If your action runs on a self-hosted GitHub Runner behind a proxy, you can enable proxy support through [global-agent environment variables](https://github.com/gajus/global-agent?tab=readme-ov-file#environment-variables),
which supports the `got` request library (https://github.com/gajus/global-agent?tab=readme-ov-file#supported-libraries)

```yaml
steps:
# ...
- name: Import Secrets
uses: hashicorp/vault-action
with:
url: https://vault-enterprise.mycompany.com:8200
method: token
token: ${{ secrets.VAULT_TOKEN }}
namespace: admin
secrets: |
secret/data/ci/aws accessKey | AWS_ACCESS_KEY_ID ;
secret/data/ci/aws secretKey | AWS_SECRET_ACCESS_KEY ;
secret/data/ci npm_token
env:
GLOBAL_AGENT_HTTP_PROXY: "http://replace-with-your-proxy-host-and-port"
```

- The `GLOBAL_AGENT_HTTP_PROXY` environment variable will manage HTTP and HTTPS requests.
- The URL protocol must be "http:", otherwise an `UNEXPECTED_STATE_ERROR` will be thrown; empty/undefined values will be gracefully ignored.
- With the `GLOBAL_AGENT_HTTPS_PROXY` environment variable it is possible to set a distinct proxy for HTTPS requests.
- Proxy support will be only available for Node.js v10 and above.

For further information, see [global-agent library](https://github.com/gajus/global-agent?tab=readme-ov-file#global-agent)

## HashiCorp Cloud Platform or Vault Enterprise

If you are using [HCP Vault](https://cloud.hashicorp.com/products/vault)
Expand Down
Loading
Loading