Add Akeyless Secrets Store Component

[kgal-akl]

Description

Added a new Secret Store component for Akeyless.

Checklist

Please make sure you've completed the relevant tasks for this PR, out of the following list:

Issue reference

#4063

Requirements

• Code compiles correctly, component loaded successfully after compiling local daprd with added Akeyless Secret Store component, secret retrieved:

• Created tests
• Created the dapr/docs PR: Add Akeyless Secret Store Documentation docs#4930
• Created the dapr/dapr PR: Add Akeyless Secret Store Component dapr#9181

[sicoyle]

Thank you for iterating with me on this! Here's another batch of feedback for ya - I still have a bit more to review on this, but this is the main I think so far :) 🙌

[tuvia-akeyless]

LGTM. Please verify (manually/tests) it is working for various types of dynamic and rotated secrets.

[kgal-akl]

@sicoyle - can you please review this again? There were a bunch of merge conflicts and it happens every I update the branch.

[sicoyle]

@sicoyle - can you please review this again? There were a bunch of merge conflicts and it happens every I update the branch.

Hi! Yes, thank you for your patience 🙏 I've been OOO for the past two weeks on vacation. I'm back now :)

[sicoyle]

can you please rebase onto main? There are over 10k lines changed now in this PR with a ton of unrelated changes...

[kgal-akl]

can you please rebase onto main? There are over 10k lines changed now in this PR with a ton of unrelated changes...

@sicoyle should be all cleaned up now. FYI, since your last review I added a few things:

• Added support for authentication options for k8s, AWS IAM.
• Added refresh token mechanism
• Added support for filtering when bulk secret retrieval using path/secret type query params.

[sicoyle]

few comments so far with the additions. I will circle back again either later today or tomorrow for updates - thank you! :) Also as long as we get this merged sometime this month then this should be in the clear imo to make the next official dapr 1.17 release set for January🎉

[kgal-akl]

@sicoyle - I've finished going over the PR comments, let me know what you think.

Also, can you please let me know what I need to do to resolve this/(your sister's?) comment?

[kgal-akl]

Hey @kgal-akl we are nearly there 🙏🏻 Could you fix DCO and the conflicts?

@sicoyle @cicoyle done.

[github-actions]

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

[kgal-akl]

Hey @kgal-akl we are nearly there 🙏🏻 Could you fix DCO and the conflicts?

@sicoyle @cicoyle any updates?

[cicoyle]

Hi @kgal-akl - Mind fixing the linter issues:

secretstores/akeyless/akeyless.go:28:15    typecheck  undefined: akeyless
  secretstores/akeyless/akeyless.go:783:105  typecheck  undefined: akeyless
  secretstores/akeyless/akeyless.go:844:59   typecheck  undefined: akeyless

Also, please ensure that all files have the proper copyright header (see other components-contrib files for reference - top should start with :

/*
Copyright 2026 The Dapr Authors
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

)

[cicoyle]

re-ran CI. thx for the updates 👍🏻

[kgal-akl]

Hi @kgal-akl - Mind fixing the linter issues:

secretstores/akeyless/akeyless.go:28:15    typecheck  undefined: akeyless
  secretstores/akeyless/akeyless.go:783:105  typecheck  undefined: akeyless
  secretstores/akeyless/akeyless.go:844:59   typecheck  undefined: akeyless

Also, please ensure that all files have the proper copyright header (see other components-contrib files for reference - top should start with :

/*
Copyright 2026 The Dapr Authors
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

)

@cicoyle done.

[cicoyle]

Thanks for the final push here 🎉

Let's ensure CI is green :) The DCO step will show you what to run to sign everything and you might need to run make modtidy-all or go mod tidy

[sicoyle]

Hi! 👋 try this pls

In your local branch, run: git rebase HEAD~129 --signoff
Force push your changes to overwrite the branch: git push --force-with-lease origin add-akeyless-secretstore

also ignore unrelated failures as i can rerun those :)

[kgal-akl]

Hi! 👋 try this pls

In your local branch, run: git rebase HEAD~129 --signoff
Force push your changes to overwrite the branch: git push --force-with-lease origin add-akeyless-secretstore

also ignore unrelated failures as i can rerun those :)

done. i see only one failure for pgsql, https://github.com/dapr/components-contrib/actions/runs/22689357591/job/65782857260#step:19:63.

[sicoyle]

closing and reopening to see if that fixes whatever is up with CI not posting build status...

[sicoyle]

can you pls try resolving the conflicts? 🙏

[kgal-akl]

can you pls try resolving the conflicts? 🙏

done

[kgal-akl]

@sicoyle @cicoyle i'm not sure what's going on here... i feel like i'm chasing down my own tail of lints, merge from main and conflicts that arise. every time i update from main i get a conflict, i see there's consistently a difference in go.{sum,mod} so i run go mod tidy and push but then it results in other lint failures. in addition, i can't seem to be able to set up the lint to run locally before pushing because it looks like it's meant to run in a CI env.

[cicoyle]

Once the comment is addressed, then make modtidy-all or go mod tidy should be the last step.

[cicoyle]

I pulled this down locally and there are some changes needed to get CI green that I can't push to this branch and fix myself.

aws "github.com/akeylesslabs/akeyless-go-cloud-id/cloudprovider/aws" transitively depends on aws-sdk-go v1, which is incompatible with the Go version in our go.mod (1.24.13). dapr/components-contrib has migrated to aws-sdk-go v2 as v1 was deprecated.

Could you update akeyless-go-cloud-id on your end to use aws-sdk-go v2? That should resolve the build and lint failures.

[kgal-akl]

@cicoyle thanks. opened new PR #4385 with the upgraded cloud id.

[dapr-bot]

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

[dapr-bot]

This pull request has been automatically closed because it was marked stale with no further activity for 7 days. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!