Support for namespaces

vault/provider.go

@@ -79,6 +79,12 @@ func Provider() terraform.ResourceProvider {
 
 				Description: "Maximum TTL for secret leases requested by this provider",
 			},
+			"namespace": {
+				Type:        schema.TypeString,
+				Optional:    true,
+				DefaultFunc: schema.EnvDefaultFunc("VAULT_NAMESPACE", ""),
+				Description: "The namespace to use. Available only for Vault Enterprise",
+			},
 		},
 
 		ConfigureFunc: providerConfigure,
@@ -196,6 +202,11 @@ func providerConfigure(d *schema.ResourceData) (interface{}, error) {
 		return nil, errors.New("no vault token found")
 	}
 
+	namespace := d.Get("namespace").(string)
+	if namespace != "" {
+		client.SetNamespace(namespace)
+	}
+
 	// In order to enforce our relatively-short lease TTL, we derive a
 	// temporary child token that inherits all of the policies of the
 	// token we were given but expires after max_lease_ttl_seconds.

website/docs/index.html.markdown

@@ -118,6 +118,9 @@ variables in order to keep credential information out of the configuration.
   See the section above on *Using Vault credentials in Terraform configuration*
   for the implications of this setting.
 
+* `namespace` - (Optional) Set the namespace to use. May be set via the
+  `VAULT_NAMESPACE` environment variable. *Available only for Vault Enterprise*.
+
 The `client_auth` configuration block accepts the following arguments:
 
 * `cert_file` - (Required) Path to a file on local disk that contains the