Questions tagged [spring-vault]

Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets from HashiCorp Vault.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
46 views

Customise ObjectMapper to serialise LocalDateTime properly

I am using Spring Vault in my project and trying to store a serialised representation of LocalDateTime (ISO date time format) as a secret data in Vault. However, the ObjectMapper used inside Spring ...
adarshr's user avatar
  • 61.7k
0 votes
1 answer
50 views

Create a wrapped Token to access Hashicorp Vault | Spring Boot

I want to create a wrapped token programmatically from my Spring Boot application in order to read/write key-value pairs to/from Hashicorp vault. I have gone through the documentation. Currently I am ...
sam's user avatar
  • 1,812
0 votes
0 answers
39 views

Support for SHA256withECDSAinP1363Format signing algorithm in hashicorp vault transit engine

We have created a encryption key of type ecdsa-p256 and We have successfully created signature with SHA256withECDSA and public key received while creation. But want to use signing algorithm ...
yash srivastava's user avatar
2 votes
0 answers
207 views

Unable to access secrets from Hashicorp Vault Cubbyhole | Spring Boot

I am trying to access secrets from the Cubbyhole engine by dynamically creating a token having use-limit, policy and ttl. After incorporating the changes in the answers, the exception has changed to: ...
sam's user avatar
  • 1,812
1 vote
1 answer
32 views

Unable to set Vault host in Spring Boot Config Server

I have a Spring-Boot config server with a file system and Vault backend. I'm trying to point the Vault host to myvaultserver.com but I can't seem to use the uri property key so I always end up with a ...
workacct2's user avatar
2 votes
0 answers
67 views

Replace Env Variables Placeholder in spring config server native mode with vault secret

I am currently working in a scenario where I need to use spring cloud config server for centralised config management. Previously we were using the "native" mode to store the configurations ...
animo3991's user avatar
  • 191
0 votes
1 answer
143 views

Hashicorp Vault password access using Spring boot vault

In my application we are making two calls from my app for getting secrets from Vault, as shown below: Test in Postman Login to Vault : POST call to https::/v1/auth/approle/login -- It will take ...
Rajesh Sharma's user avatar
0 votes
0 answers
134 views

Getting Caused By: java.security.SignatureException: Signature does not match. while using X.509 client key and certificate

I am getting below exception when trying to use X.509 client certificate for accessing keys from Vault using spring-vault-code 2.3.3 aused By: java.security.SignatureException: Signature does not ...
varun seth's user avatar
0 votes
0 answers
108 views

How to mock bean before ConfigDataLoader in SpringBootTest

Config file processing has been changed in Spring Boot 2.4. It allows to eliminate bootstrap configuration and use spring.config.import instead together with some specific locations like vault://…​. ...
Alex's user avatar
  • 5,317
0 votes
0 answers
52 views

How to enable refreshing vault properties in an application using Spring Cloud Vault Kubernetes authentication

Kubernetes used to issue long-lived service account tokens. at some point this behavior was changed to issue 1hr tokens. when a token expires, the file contents of the service account token file (/var/...
Dave Ankin's user avatar
  • 1,101
2 votes
0 answers
129 views

spring.cloud.vault.config.lifecycle.enabled not working

Spring cloud vault keeps trying to renew token but I want to forbid it from doing so. When I was using spring 2.3.x I could just set spring.cloud.vault.config.lifecycle.enabled=false but it does not ...
Shuyang Ji's user avatar
1 vote
2 answers
575 views

Vault server, how to programmatically put key/value to vault server using Java or Spring framework

I want to store some secrets/credentials during runtime in my application, similar to the following command. vault kv put -path=secret/application key1=val1 I have reviewed the HashiCorp SDK, but it ...
xX_Xeno_Blade_Xx's user avatar
2 votes
0 answers
423 views

Secrets are not read from the vault after migrating to Spring Boot 3 - Getting an error

We are in process of migrating spring boot 3 from 2.7.7(We did an incremental upgrade from 2.6.8 to 2.7.7 and then to 3.0.0). We have almost got our application working except for the secrets are not ...
Arun's user avatar
  • 21
0 votes
1 answer
376 views

Status 400 Bad Request: failed to revoke entry... cannot be dropped because some objects depend on it (SQLSTATE 2BP01);

I have configured my spring boot application to obtain the database credentials from the vault database backend. This is working fine when I run it with the vault in 'vault for development mode'. But, ...
udani's user avatar
  • 1,263
0 votes
0 answers
241 views

Hw to configure spring vault to authenticate with a JWT token

I'm trying to use spring-vault-core and (optionally) spring-cloud-starter-vault-config to connect to a vault using a JWT token as the auth mechanism. From the documentation, you can request a token ...
Ben Green's user avatar
  • 3,983
1 vote
1 answer
556 views

Spring Vault can't validate self-signed cert signed by self-signed CA after upgrading from Spring Boot 2.7.x -> Spring Boot 3.0.0

I am running Spring Boot app using a self-signed CA cert to verify Vault certificate that is signed by the self-signed CA. This setup has worked with Spring Vault until upgrading from Spring Boot 2.7....
Laurenzo's user avatar
  • 545
0 votes
1 answer
2k views

Disable vault spring boot

I have a spring boot project where I wanted to disable the vault conditionally. <dependency> <groupId>org.springframework.vault</groupId> <artifactId>spring-vault-core</...
Piyush Singh's user avatar
1 vote
0 answers
273 views

Spring Cloud Vault Config Secretes Backend AWS SocketTimeoutException

I have a Spring Boot + Kotlin microservice that gets the AWS credentials to connect to DynamoDB from Vault. But randomly the Vault implementation is throwing a SocketTimeoutException while renewing ...
Randy Hector's user avatar
2 votes
1 answer
1k views

Using multiple types of Vault secrets in one Spring boot application

Consider the following application.properties file of a Spring Boot application. # Spring configuration parameters spring.application.name=MyApplication server.port=${SERVICE_PORT:8080} # SSL ...
KDW's user avatar
  • 485
0 votes
2 answers
1k views

Vault UserPass authentication with Spring boot

I need to connect to Vault from my spring boot microservice. To get the vault token, the service needs to login to vault by providing username and password. Spring-vault integration doesn't support ...
Antony Vimal Raj's user avatar
2 votes
0 answers
234 views

How to decrypt a ciphertext locally using Java / Kotlin from an exported key that supported convergent encryption in hashicorp vault?

I have a usecase where I would want to keep a backup of the encryption keys in case the vault server goes down and decrypt it locally. I am using Hashicorp Transit Secrets Engine, and to test it out I ...
Wasae Shoaib's user avatar
0 votes
0 answers
2k views

Spring cloud config and Vault Integration

I'm trying to read secret values using spring vault. All the properties for client application is stored in github and spring config server is used to access the properties. When I add the vault ...
DxG's user avatar
  • 177
2 votes
0 answers
926 views

How to implement Spring Cloud Vault with multiple paths using different roles?

I already have Spring Cloud Vault set up to read from multiple paths that have a common role but now I have a requirement to read from multiple paths that may have differing roles. My existing ...
Al Pal's user avatar
  • 285
0 votes
1 answer
295 views

How do i get Spring Vault to trust a custom TLS chain provided as PEM

I am currently using Spring Vault with TLS, which works fine. My problem is that I need to support a custom TLS chain to connect to a client's Vault instance. Using a jks is not an option, my only ...
Cerbis's user avatar
  • 525
1 vote
1 answer
2k views

Unable to instantiate VaultConfigDataLoader

I'm trying to configure Spring Cloud Vault in my Spring Boot application (v. 2.4.2). I'm using Spring Cloud v. 2020.0.5 (which, according to the Release train, should be fine). C:\Tools\jdk1.8.0_92\...
Ionut's user avatar
  • 103
0 votes
1 answer
2k views

spring cloud vault not working in newer versions

I am trying to make working hashicorp vault deployed on azure's AKS cluster with spring boot. I tried code from this blog post: blog post which works fine, but when I will change versions for: <...
FrancMo's user avatar
  • 2,489
0 votes
1 answer
490 views

Can Spring Vault support Azure Key Vault?

From the Spring Vault official site, it supports HashiCorp’s Vault, and there are some examples with HashiCorp’s Vault. Does it support Azure Keyvault natively? From the azure document, springboot ...
Simon Liu's user avatar
2 votes
0 answers
1k views

How to disable SSL Verification in Spring Vault (Spring Vault Core - version: 2.3.1)

I am getting below exception: Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://<kmaas_domain>:443/v1/auth/aws/login": ...
dishansh's user avatar
0 votes
0 answers
1k views

unable to load secrets from vault when spring.cloud.vault.config.lifecycle.enabled is set to false

I am using spring cloud starter vault config of version 2.2.5.RELEASE for connecting to my secured vault server which is working on approle authentication mechanism, i observed that if i setup value ...
Mahendra Tonape's user avatar
1 vote
0 answers
462 views

In Spring vault is it possible to get events when the database credentials are rotataed with static role type through hashicorp vault

I'm using Spring vault to fetch the database credentials from hashicorp vault. Using SecretLeaseContainer and LeaseListener i'm able to get the events when the credentials are rotated for Dynamic ...
Pitchu's user avatar
  • 27
1 vote
1 answer
767 views

Config server with Vault backend - fetch secrets from multiple paths

We are using config server with Vault backend to fetch application secrets. Config server project is using spring-vault-core dependency and spring-vault-dependencies dependency management for Vault. ...
Abhijit Kumar's user avatar
1 vote
1 answer
529 views

How to disable SSL verification in Spring Vault

I'm trying to configure Spring vault, and for some reason, I need to disable SSL verification. Is there any known way to configure Spring Vault to ignore SSL?
meldevep's user avatar
  • 593
1 vote
1 answer
550 views

Adding keys to Spring Boot vault

I am implementing Spring Boot vault. Whenever I try to add more than one key, only the last one is saved. For example, at this page, https://www.javainuse.com/spring/cloud-vault, they have this ...
Peter Kronenberg's user avatar
0 votes
0 answers
258 views

Autowired beans in EnvironmentProcessor are null

I am using spring-vault and specified PostProcessor that supposed to do some custom operations on Vault @Profile("cloud") @Component public class VaultPostProcessor implements ...
lapots's user avatar
  • 12.8k
1 vote
0 answers
506 views

actuator/refresh path not updating @value variables when use spring cloud vault

When I update a property in the vault and call actuator / refresh, it still shows an older value. I use spring boot and spring cloud. <spring-cloud-dependencies.version>2020.0.3</spring-cloud-...
oguzhanonder7506's user avatar
0 votes
1 answer
1k views

Spring Vault returns null

I am very new to Spring Vault, and so I followed a lot of guides and YouTube videos. The problem I am facing is that I think, I am able to access the vault but when I try to retrieve the values from ...
Thinh Pham's user avatar
2 votes
1 answer
1k views

How to group membership search in Hashicorp Vault

I'm trying to set up a demonstration of the Vault as a solution to my company's security concerns about very sensitive user data. I've added the ldap authentication and I'm able to login with any ldap ...
Bonana's user avatar
  • 65
0 votes
1 answer
2k views

Vault login token expiring unexpectedly

We operate a containerized Spring Boot application. In order to access third party APIs, secrets to those APIs are kept in a Vault instance. Our application connects to Vault via Spring Vault Core ...
ngc4579's user avatar
  • 43
1 vote
1 answer
5k views

Spring boot cloud vault does not load properties anymore after update to version 3.0.3

I'm facing the same problem as bootstrap.yml configuration not processed anymore with Spring Cloud 2020.0. I updated spring boot cloud to the version 3.0.3. My config is: spring: config: import: ...
sge's user avatar
  • 468
1 vote
1 answer
1k views

Using Spring Cloud Vault and ConfigData API with multiple profile files

I have 5 profiles for my Spring Boot application application.yml application-prod.yml application-stg.yml application-dev.yml application-local.yml One default config and 4 for different environments....
siim's user avatar
  • 365
2 votes
1 answer
1k views

Spring Vault Integration - read secrets from multiple paths

Is it possible to read secrets stored under multiple paths/contexts in Vault from Spring Boot application? I assume, profiles should be used, but not sure and still didn't manage to configure profiles....
Ivan's user avatar
  • 193
0 votes
0 answers
258 views

Spring Cloud Vault with GCP-IAM Auth Method for multiple projects

I have some issue, wasn't able to find any docs, maybe I'm missing something. We are going to use this method. I've deployed some service and Vault in GKE in one project and it works fine. I used this ...
Rafik Alimardanov's user avatar
2 votes
0 answers
1k views

Enabling debug logging for code that is run very early on in a Spring boot app

I am writing a small Spring boot app that I want to read some properties from Hashi Corp Vault which will ultimately be run in a Kubernetes environment. I'm doing this by using the spring.cloud.vault ...
RobE's user avatar
  • 21
2 votes
2 answers
17k views

Spring Boot 2.4.4 failed to start after upgrading

I am upgrading Spring boot application, which is currently working on 2.1.13 to 2.4.4. After upgrade, spring boot application is not starting. Few of the modules used in application are as follows: ...
Jagdish Kamble's user avatar
1 vote
1 answer
211 views

Spring Cloud Config Vault Strange Request

We are using Spring Cloud 2.2.6.RELEASE using vault for storage for our microservices and our Vault team has complained about number of request, they provided Splunk log access and I see many request ...
emoritz's user avatar
  • 51
0 votes
1 answer
961 views

Error with Spring AppRoleAuthentication - URI is not absolute

I'm trying to retrieve secrets from vault using the AppRole authentication. But I get the error : java.lang.IllegalArgumentException: URI is not absolute What I do is create a vaultEndpoint then ...
Flonoff's user avatar
  • 11
2 votes
2 answers
2k views

Correct the classpath of your application so that it contains a single, compatible version of org.springframework.vault.support.SslConfiguration

I am developing code Spring Boot Microservices Project - Part 1 - Spring Boot Config Server & Eureka Service Discovery from - https://www.youtube.com/watch?v=Fq85GschdLw and getting the below ...
Prateek's user avatar
  • 10.9k
0 votes
1 answer
311 views

How to allow spring boot applications to use custom jar having spring cloud dependency

I have many spring boot microservices and I have developed a new project that has Spring-Vault as a dependency. This new project (say vault-client-spring) is developed in order to have common ...
the_tech_maddy's user avatar
0 votes
1 answer
861 views

How to setup @ConfigurationProperties to get the values from Hashicorp Vault what is at the address secret/demo-app/keycloak?

I started a Hashicorp Vault and my secrets can be found at secret/demo-app/keycloak. I have 2 values here: clientId, clientSecret I setup the bootstrap.properties: spring.application.name=demo-app ...
stacktrace2234's user avatar
0 votes
1 answer
192 views

How to import local external jar having spring cloud vault client dependency

I have a "multi-module" Gradle project named "utils". In that, I have created a new sub-project that will be used as a client for Hashicorp's Vault. I'll use this jar to my Spring ...
the_tech_maddy's user avatar