Hashicorp Vault integration for ACE mqsicredentials

We were excited to hear about IBM's acquisition of Hasicorp Vault and would like to see the Hasicorp Vault integration for ACE, particularly for storing mqsicredentials commands which produces an ACE Vault. We assume that the Hashicorp Vault would either be hosted privately on IBM Cloud/Azure or locally on a central Openshift cluster that we provision or in similar ways. We also assume then that the license for Hashicorp would naturally wont be needed for existing CP4I customers.

We are running ACE SC-2 release pods on CP4I on Openshift on Azure since a few years now and following is the background for our request.

- Today the mqsicredentials file with commands is > 35KB in size which prevents us from storing it in Azure Key Vault

- We tried to use Azure container blob, but the driver is unreliable and is supported only on Openshift ARO.

- So finally we really do not store the credentials anywhere except inside Openshift secrets which is a Single Point of Failure.

- With the above exception, everything else is synced from Azure Key Vault and works very well for us.

- Today we construct an ACE vault and then execute the mqsicredentials commands and create an Openshift secret holding the ACE Vault file ready to be mounted onto the ACE integration runtime pods, since this is a home grown solution, we have raised another RFE to address this in the future: https://ideas.ibm.com/ideas/CIP-I-321