Questions tagged [spring-vault]
Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets from HashiCorp Vault.
128
questions
-1
votes
1
answer
46
views
Customise ObjectMapper to serialise LocalDateTime properly
I am using Spring Vault in my project and trying to store a serialised representation of LocalDateTime (ISO date time format) as a secret data in Vault. However, the ObjectMapper used inside Spring ...
0
votes
1
answer
50
views
Create a wrapped Token to access Hashicorp Vault | Spring Boot
I want to create a wrapped token programmatically from my Spring Boot application in order to read/write key-value pairs to/from Hashicorp vault. I have gone through the documentation.
Currently I am ...
0
votes
0
answers
39
views
Support for SHA256withECDSAinP1363Format signing algorithm in hashicorp vault transit engine
We have created a encryption key of type ecdsa-p256 and We have successfully created signature with SHA256withECDSA and public key received while creation.
But want to use signing algorithm ...
2
votes
0
answers
207
views
Unable to access secrets from Hashicorp Vault Cubbyhole | Spring Boot
I am trying to access secrets from the Cubbyhole engine by dynamically creating a token having use-limit, policy and ttl.
After incorporating the changes in the answers, the exception has changed to:
...
1
vote
1
answer
32
views
Unable to set Vault host in Spring Boot Config Server
I have a Spring-Boot config server with a file system and Vault backend. I'm trying to point the Vault host to myvaultserver.com but I can't seem to use the uri property key so I always end up with a ...
2
votes
0
answers
67
views
Replace Env Variables Placeholder in spring config server native mode with vault secret
I am currently working in a scenario where I need to use spring cloud config server for centralised config management.
Previously we were using the "native" mode to store the configurations ...
0
votes
1
answer
143
views
Hashicorp Vault password access using Spring boot vault
In my application we are making two calls from my app for getting secrets from Vault, as shown below:
Test in Postman
Login to Vault : POST call to https::/v1/auth/approle/login -- It will take ...
0
votes
0
answers
134
views
Getting Caused By: java.security.SignatureException: Signature does not match. while using X.509 client key and certificate
I am getting below exception when trying to use X.509 client certificate for accessing keys from Vault using spring-vault-code 2.3.3
aused By: java.security.SignatureException: Signature does not ...
0
votes
0
answers
108
views
How to mock bean before ConfigDataLoader in SpringBootTest
Config file processing has been changed in Spring Boot 2.4. It allows to eliminate bootstrap configuration and use spring.config.import instead together with some specific locations like vault://…. ...
0
votes
0
answers
52
views
How to enable refreshing vault properties in an application using Spring Cloud Vault Kubernetes authentication
Kubernetes used to issue long-lived service account tokens. at some point this behavior was changed to issue 1hr tokens. when a token expires, the file contents of the service account token file (/var/...
2
votes
0
answers
129
views
spring.cloud.vault.config.lifecycle.enabled not working
Spring cloud vault keeps trying to renew token but I want to forbid it from doing so. When I was using spring 2.3.x I could just set spring.cloud.vault.config.lifecycle.enabled=false but it does not ...
1
vote
2
answers
575
views
Vault server, how to programmatically put key/value to vault server using Java or Spring framework
I want to store some secrets/credentials during runtime in my application, similar to the following command.
vault kv put -path=secret/application key1=val1
I have reviewed the HashiCorp SDK, but it ...
2
votes
0
answers
423
views
Secrets are not read from the vault after migrating to Spring Boot 3 - Getting an error
We are in process of migrating spring boot 3 from 2.7.7(We did an incremental upgrade from 2.6.8 to 2.7.7 and then to 3.0.0). We have almost got our application working except for the secrets are not ...
0
votes
1
answer
376
views
Status 400 Bad Request: failed to revoke entry... cannot be dropped because some objects depend on it (SQLSTATE 2BP01);
I have configured my spring boot application to obtain the database credentials from the vault database backend. This is working fine when I run it with the vault in 'vault for development mode'. But, ...
0
votes
0
answers
241
views
Hw to configure spring vault to authenticate with a JWT token
I'm trying to use spring-vault-core and (optionally) spring-cloud-starter-vault-config to connect to a vault using a JWT token as the auth mechanism.
From the documentation, you can request a token ...
1
vote
1
answer
556
views
Spring Vault can't validate self-signed cert signed by self-signed CA after upgrading from Spring Boot 2.7.x -> Spring Boot 3.0.0
I am running Spring Boot app using a self-signed CA cert to verify Vault certificate that is signed by the self-signed CA.
This setup has worked with Spring Vault until upgrading from Spring Boot 2.7....
0
votes
1
answer
2k
views
Disable vault spring boot
I have a spring boot project where I wanted to disable the vault conditionally.
<dependency>
<groupId>org.springframework.vault</groupId>
<artifactId>spring-vault-core</...
1
vote
0
answers
273
views
Spring Cloud Vault Config Secretes Backend AWS SocketTimeoutException
I have a Spring Boot + Kotlin microservice that gets the AWS credentials to connect to DynamoDB from Vault.
But randomly the Vault implementation is throwing a SocketTimeoutException while renewing ...
2
votes
1
answer
1k
views
Using multiple types of Vault secrets in one Spring boot application
Consider the following application.properties file of a Spring Boot application.
# Spring configuration parameters
spring.application.name=MyApplication
server.port=${SERVICE_PORT:8080}
# SSL ...
0
votes
2
answers
1k
views
Vault UserPass authentication with Spring boot
I need to connect to Vault from my spring boot microservice. To get the vault token, the service needs to login to vault by providing username and password. Spring-vault integration doesn't support ...
2
votes
0
answers
234
views
How to decrypt a ciphertext locally using Java / Kotlin from an exported key that supported convergent encryption in hashicorp vault?
I have a usecase where I would want to keep a backup of the encryption keys in case the vault server goes down and decrypt it locally. I am using Hashicorp Transit Secrets Engine, and to test it out I ...
0
votes
0
answers
2k
views
Spring cloud config and Vault Integration
I'm trying to read secret values using spring vault. All the properties for client application is stored in github and spring config server is used to access the properties. When I add the vault ...
2
votes
0
answers
926
views
How to implement Spring Cloud Vault with multiple paths using different roles?
I already have Spring Cloud Vault set up to read from multiple paths that have a common role but now I have a requirement to read from multiple paths that may have differing roles. My existing ...
0
votes
1
answer
295
views
How do i get Spring Vault to trust a custom TLS chain provided as PEM
I am currently using Spring Vault with TLS, which works fine. My problem is that I need to support a custom TLS chain to connect to a client's Vault instance. Using a jks is not an option, my only ...
1
vote
1
answer
2k
views
Unable to instantiate VaultConfigDataLoader
I'm trying to configure Spring Cloud Vault in my Spring Boot application (v. 2.4.2). I'm using Spring Cloud v. 2020.0.5 (which, according to the Release train, should be fine).
C:\Tools\jdk1.8.0_92\...
0
votes
1
answer
2k
views
spring cloud vault not working in newer versions
I am trying to make working hashicorp vault deployed on azure's AKS cluster with spring boot.
I tried code from this blog post: blog post
which works fine, but when I will change versions for:
<...
0
votes
1
answer
490
views
Can Spring Vault support Azure Key Vault?
From the Spring Vault official site, it supports HashiCorp’s Vault, and there are some examples with HashiCorp’s Vault.
Does it support Azure Keyvault natively?
From the azure document, springboot ...
2
votes
0
answers
1k
views
How to disable SSL Verification in Spring Vault (Spring Vault Core - version: 2.3.1)
I am getting below exception:
Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://<kmaas_domain>:443/v1/auth/aws/login": ...
0
votes
0
answers
1k
views
unable to load secrets from vault when spring.cloud.vault.config.lifecycle.enabled is set to false
I am using spring cloud starter vault config of version 2.2.5.RELEASE for connecting to my secured vault server which is working on approle authentication mechanism, i observed that if i setup value ...
1
vote
0
answers
462
views
In Spring vault is it possible to get events when the database credentials are rotataed with static role type through hashicorp vault
I'm using Spring vault to fetch the database credentials from hashicorp vault. Using SecretLeaseContainer and LeaseListener i'm able to get the events when the credentials are rotated for Dynamic ...
1
vote
1
answer
767
views
Config server with Vault backend - fetch secrets from multiple paths
We are using config server with Vault backend to fetch application secrets.
Config server project is using spring-vault-core dependency and spring-vault-dependencies dependency management for Vault.
...
1
vote
1
answer
529
views
How to disable SSL verification in Spring Vault
I'm trying to configure Spring vault, and for some reason, I need to disable SSL verification. Is there any known way to configure Spring Vault to ignore SSL?
1
vote
1
answer
550
views
Adding keys to Spring Boot vault
I am implementing Spring Boot vault. Whenever I try to add more than one key, only the last one is saved. For example, at this page, https://www.javainuse.com/spring/cloud-vault, they have this ...
0
votes
0
answers
258
views
Autowired beans in EnvironmentProcessor are null
I am using spring-vault and specified PostProcessor that supposed to do some custom operations on Vault
@Profile("cloud")
@Component
public class VaultPostProcessor implements ...
1
vote
0
answers
506
views
actuator/refresh path not updating @value variables when use spring cloud vault
When I update a property in the vault and call actuator / refresh, it still shows an older value.
I use spring boot and spring cloud.
<spring-cloud-dependencies.version>2020.0.3</spring-cloud-...
0
votes
1
answer
1k
views
Spring Vault returns null
I am very new to Spring Vault, and so I followed a lot of guides and YouTube videos. The problem I am facing is that I think, I am able to access the vault but when I try to retrieve the values from ...
2
votes
1
answer
1k
views
How to group membership search in Hashicorp Vault
I'm trying to set up a demonstration of the Vault as a solution to my company's security concerns about very sensitive user data. I've added the ldap authentication and I'm able to login with any ldap ...
0
votes
1
answer
2k
views
Vault login token expiring unexpectedly
We operate a containerized Spring Boot application. In order to access third party APIs, secrets to those APIs are kept in a Vault instance. Our application connects to Vault via Spring Vault Core ...
1
vote
1
answer
5k
views
Spring boot cloud vault does not load properties anymore after update to version 3.0.3
I'm facing the same problem as bootstrap.yml configuration not processed anymore with Spring Cloud 2020.0.
I updated spring boot cloud to the version 3.0.3. My config is:
spring:
config:
import: ...
1
vote
1
answer
1k
views
Using Spring Cloud Vault and ConfigData API with multiple profile files
I have 5 profiles for my Spring Boot application
application.yml
application-prod.yml
application-stg.yml
application-dev.yml
application-local.yml
One default config and 4 for different environments....
2
votes
1
answer
1k
views
Spring Vault Integration - read secrets from multiple paths
Is it possible to read secrets stored under multiple paths/contexts in Vault from Spring Boot application?
I assume, profiles should be used, but not sure and still didn't manage to configure profiles....
0
votes
0
answers
258
views
Spring Cloud Vault with GCP-IAM Auth Method for multiple projects
I have some issue, wasn't able to find any docs, maybe I'm missing something.
We are going to use this method. I've deployed some service and Vault in GKE in one project and it works fine. I used this ...
2
votes
0
answers
1k
views
Enabling debug logging for code that is run very early on in a Spring boot app
I am writing a small Spring boot app that I want to read some properties from Hashi Corp Vault which will ultimately be run in a Kubernetes environment.
I'm doing this by using the spring.cloud.vault ...
2
votes
2
answers
17k
views
Spring Boot 2.4.4 failed to start after upgrading
I am upgrading Spring boot application, which is currently working on 2.1.13 to 2.4.4.
After upgrade, spring boot application is not starting.
Few of the modules used in application are as follows:
...
1
vote
1
answer
211
views
Spring Cloud Config Vault Strange Request
We are using Spring Cloud 2.2.6.RELEASE using vault for storage for our microservices and our Vault team has complained about number of request, they provided Splunk log access and I see many request ...
0
votes
1
answer
961
views
Error with Spring AppRoleAuthentication - URI is not absolute
I'm trying to retrieve secrets from vault using the AppRole authentication. But I get the error :
java.lang.IllegalArgumentException: URI is not absolute
What I do is create a vaultEndpoint then ...
2
votes
2
answers
2k
views
Correct the classpath of your application so that it contains a single, compatible version of org.springframework.vault.support.SslConfiguration
I am developing code Spring Boot Microservices Project - Part 1 - Spring Boot Config Server & Eureka Service Discovery from - https://www.youtube.com/watch?v=Fq85GschdLw and getting the below ...
0
votes
1
answer
311
views
How to allow spring boot applications to use custom jar having spring cloud dependency
I have many spring boot microservices and I have developed a new project that has Spring-Vault as a dependency. This new project (say vault-client-spring) is developed in order to have common ...
0
votes
1
answer
861
views
How to setup @ConfigurationProperties to get the values from Hashicorp Vault what is at the address secret/demo-app/keycloak?
I started a Hashicorp Vault and my secrets can be found at secret/demo-app/keycloak. I have 2 values here: clientId, clientSecret
I setup the bootstrap.properties:
spring.application.name=demo-app
...
0
votes
1
answer
192
views
How to import local external jar having spring cloud vault client dependency
I have a "multi-module" Gradle project named "utils". In that, I have created a new sub-project that will be used as a client for Hashicorp's Vault. I'll use this jar to my Spring ...