Questions tagged [spring-vault]

Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets from HashiCorp Vault.

Filter by
Sorted by
Tagged with
0 votes
1 answer
90 views

Vault server, how to programmatically put key/value to vault server using Java or Spring framework

I want to store some secrets/credentials during runtime in my application, similar to the following command. vault kv put -path=secret/application key1=val1 I have reviewed the HashiCorp SDK, but it ...
1 vote
0 answers
132 views

Secrets are not read from the vault after migrating to Spring Boot 3 - Getting an error

We are in process of migrating spring boot 3 from 2.7.7(We did an incremental upgrade from 2.6.8 to 2.7.7 and then to 3.0.0). We have almost got our application working except for the secrets are not ...
  • 11
0 votes
0 answers
28 views

Spring Vault - How to access KV values at custom mount point?

We have Hashicorp Vault KV v1 engine mounted at /foo instead of /v1. How do I tell Spring Vault library to use /foo? Using Spring Vault 2.3.2, Spring Boot 2.7.3, Java 11. I pass in foo/path/to/...
0 votes
1 answer
49 views

Status 400 Bad Request: failed to revoke entry... cannot be dropped because some objects depend on it (SQLSTATE 2BP01);

I have configured my spring boot application to obtain the database credentials from the vault database backend. This is working fine when I run it with the vault in 'vault for development mode'. But, ...
  • 1,223
0 votes
0 answers
52 views

Hw to configure spring vault to authenticate with a JWT token

I'm trying to use spring-vault-core and (optionally) spring-cloud-starter-vault-config to connect to a vault using a JWT token as the auth mechanism. From the documentation, you can request a token ...
  • 3,853
1 vote
1 answer
164 views

Spring Vault can't validate self-signed cert signed by self-signed CA after upgrading from Spring Boot 2.7.x -> Spring Boot 3.0.0

I am running Spring Boot app using a self-signed CA cert to verify Vault certificate that is signed by the self-signed CA. This setup has worked with Spring Vault until upgrading from Spring Boot 2.7....
  • 464
0 votes
0 answers
15 views

Spring Boot Vault Permanently remove record

How can I permanently remove a record from the vault via VaultTemplate (VaultOperations)? When I simply autowire VaultTemplate.class in my service class and try to remove, then the record data was ...
  • 41
0 votes
1 answer
169 views

Disable vault spring boot

I have a spring boot project where I wanted to disable the vault conditionally. <dependency> <groupId>org.springframework.vault</groupId> <artifactId>spring-vault-core</...
0 votes
0 answers
42 views

Injecting a list of values into a @VaultPropertySource is not working

I am using spring-vault-core. I have create some list type properties in my appilication.propertis and I am trying to inject it into a member type @VaultPropertySource in one of my classes with no ...
1 vote
0 answers
189 views

Spring Cloud Vault Config Secretes Backend AWS SocketTimeoutException

I have a Spring Boot + Kotlin microservice that gets the AWS credentials to connect to DynamoDB from Vault. But randomly the Vault implementation is throwing a SocketTimeoutException while renewing ...
2 votes
1 answer
665 views

Using multiple types of Vault secrets in one Spring boot application

Consider the following application.properties file of a Spring Boot application. # Spring configuration parameters spring.application.name=MyApplication server.port=${SERVICE_PORT:8080} # SSL ...
  • 465
0 votes
2 answers
724 views

Vault UserPass authentication with Spring boot

I need to connect to Vault from my spring boot microservice. To get the vault token, the service needs to login to vault by providing username and password. Spring-vault integration doesn't support ...
2 votes
0 answers
143 views

How to decrypt a ciphertext locally using Java / Kotlin from an exported key that supported convergent encryption in hashicorp vault?

I have a usecase where I would want to keep a backup of the encryption keys in case the vault server goes down and decrypt it locally. I am using Hashicorp Transit Secrets Engine, and to test it out I ...
0 votes
0 answers
1k views

Spring cloud config and Vault Integration

I'm trying to read secret values using spring vault. All the properties for client application is stored in github and spring config server is used to access the properties. When I add the vault ...
  • 109
2 votes
0 answers
696 views

How to implement Spring Cloud Vault with multiple paths using different roles?

I already have Spring Cloud Vault set up to read from multiple paths that have a common role but now I have a requirement to read from multiple paths that may have differing roles. My existing ...
  • 224
0 votes
0 answers
41 views

how can i not store the clientid/secret of vault in botstrap yml and get from Vault using app role?

I am trying to read the vault properties by putting those in bootstrap yml, but i dont want to store them there instead i want to go to vault and get them in my program. I tried just putting roleid ...
0 votes
1 answer
166 views

How do i get Spring Vault to trust a custom TLS chain provided as PEM

I am currently using Spring Vault with TLS, which works fine. My problem is that I need to support a custom TLS chain to connect to a client's Vault instance. Using a jks is not an option, my only ...
  • 515
1 vote
1 answer
1k views

Unable to instantiate VaultConfigDataLoader

I'm trying to configure Spring Cloud Vault in my Spring Boot application (v. 2.4.2). I'm using Spring Cloud v. 2020.0.5 (which, according to the Release train, should be fine). C:\Tools\jdk1.8.0_92\...
  • 103
0 votes
1 answer
1k views

spring cloud vault not working in newer versions

I am trying to make working hashicorp vault deployed on azure's AKS cluster with spring boot. I tried code from this blog post: blog post which works fine, but when I will change versions for: <...
  • 2,305
0 votes
1 answer
388 views

Can Spring Vault support Azure Key Vault?

From the Spring Vault official site, it supports HashiCorp’s Vault, and there are some examples with HashiCorp’s Vault. Does it support Azure Keyvault natively? From the azure document, springboot ...
2 votes
0 answers
814 views

How to disable SSL Verification in Spring Vault (Spring Vault Core - version: 2.3.1)

I am getting below exception: Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://<kmaas_domain>:443/v1/auth/aws/login": ...
0 votes
0 answers
1k views

unable to load secrets from vault when spring.cloud.vault.config.lifecycle.enabled is set to false

I am using spring cloud starter vault config of version 2.2.5.RELEASE for connecting to my secured vault server which is working on approle authentication mechanism, i observed that if i setup value ...
1 vote
0 answers
319 views

In Spring vault is it possible to get events when the database credentials are rotataed with static role type through hashicorp vault

I'm using Spring vault to fetch the database credentials from hashicorp vault. Using SecretLeaseContainer and LeaseListener i'm able to get the events when the credentials are rotated for Dynamic ...
  • 27
1 vote
1 answer
539 views

Config server with Vault backend - fetch secrets from multiple paths

We are using config server with Vault backend to fetch application secrets. Config server project is using spring-vault-core dependency and spring-vault-dependencies dependency management for Vault. ...
1 vote
1 answer
270 views

How to disable SSL verification in Spring Vault

I'm trying to configure Spring vault, and for some reason, I need to disable SSL verification. Is there any known way to configure Spring Vault to ignore SSL?
  • 181
1 vote
1 answer
390 views

Adding keys to Spring Boot vault

I am implementing Spring Boot vault. Whenever I try to add more than one key, only the last one is saved. For example, at this page, https://www.javainuse.com/spring/cloud-vault, they have this ...
0 votes
0 answers
155 views

Autowired beans in EnvironmentProcessor are null

I am using spring-vault and specified PostProcessor that supposed to do some custom operations on Vault @Profile("cloud") @Component public class VaultPostProcessor implements ...
  • 12.1k
1 vote
0 answers
377 views

actuator/refresh path not updating @value variables when use spring cloud vault

When I update a property in the vault and call actuator / refresh, it still shows an older value. I use spring boot and spring cloud. <spring-cloud-dependencies.version>2020.0.3</spring-cloud-...
0 votes
1 answer
640 views

Spring Vault returns null

I am very new to Spring Vault, and so I followed a lot of guides and YouTube videos. The problem I am facing is that I think, I am able to access the vault but when I try to retrieve the values from ...
2 votes
1 answer
781 views

How to group membership search in Hashicorp Vault

I'm trying to set up a demonstration of the Vault as a solution to my company's security concerns about very sensitive user data. I've added the ldap authentication and I'm able to login with any ldap ...
  • 65
0 votes
1 answer
1k views

Vault login token expiring unexpectedly

We operate a containerized Spring Boot application. In order to access third party APIs, secrets to those APIs are kept in a Vault instance. Our application connects to Vault via Spring Vault Core ...
  • 25
1 vote
1 answer
3k views

Spring boot cloud vault does not load properties anymore after update to version 3.0.3

I'm facing the same problem as bootstrap.yml configuration not processed anymore with Spring Cloud 2020.0. I updated spring boot cloud to the version 3.0.3. My config is: spring: config: import: ...
  • 255
1 vote
1 answer
824 views

Using Spring Cloud Vault and ConfigData API with multiple profile files

I have 5 profiles for my Spring Boot application application.yml application-prod.yml application-stg.yml application-dev.yml application-local.yml One default config and 4 for different environments....
  • 368
2 votes
1 answer
687 views

Spring Vault Integration - read secrets from multiple paths

Is it possible to read secrets stored under multiple paths/contexts in Vault from Spring Boot application? I assume, profiles should be used, but not sure and still didn't manage to configure profiles....
  • 193
0 votes
0 answers
186 views

Spring Cloud Vault with GCP-IAM Auth Method for multiple projects

I have some issue, wasn't able to find any docs, maybe I'm missing something. We are going to use this method. I've deployed some service and Vault in GKE in one project and it works fine. I used this ...
1 vote
0 answers
775 views

Enabling debug logging for code that is run very early on in a Spring boot app

I am writing a small Spring boot app that I want to read some properties from Hashi Corp Vault which will ultimately be run in a Kubernetes environment. I'm doing this by using the spring.cloud.vault ...
  • 11
2 votes
2 answers
13k views

Spring Boot 2.4.4 failed to start after upgrading

I am upgrading Spring boot application, which is currently working on 2.1.13 to 2.4.4. After upgrade, spring boot application is not starting. Few of the modules used in application are as follows: ...
1 vote
1 answer
143 views

Spring Cloud Config Vault Strange Request

We are using Spring Cloud 2.2.6.RELEASE using vault for storage for our microservices and our Vault team has complained about number of request, they provided Splunk log access and I see many request ...
  • 51
0 votes
1 answer
667 views

Error with Spring AppRoleAuthentication - URI is not absolute

I'm trying to retrieve secrets from vault using the AppRole authentication. But I get the error : java.lang.IllegalArgumentException: URI is not absolute What I do is create a vaultEndpoint then ...
  • 11
2 votes
2 answers
1k views

Correct the classpath of your application so that it contains a single, compatible version of org.springframework.vault.support.SslConfiguration

I am developing code Spring Boot Microservices Project - Part 1 - Spring Boot Config Server & Eureka Service Discovery from - https://www.youtube.com/watch?v=Fq85GschdLw and getting the below ...
  • 1
0 votes
1 answer
243 views

How to allow spring boot applications to use custom jar having spring cloud dependency

I have many spring boot microservices and I have developed a new project that has Spring-Vault as a dependency. This new project (say vault-client-spring) is developed in order to have common ...
0 votes
1 answer
571 views

How to setup @ConfigurationProperties to get the values from Hashicorp Vault what is at the address secret/demo-app/keycloak?

I started a Hashicorp Vault and my secrets can be found at secret/demo-app/keycloak. I have 2 values here: clientId, clientSecret I setup the bootstrap.properties: spring.application.name=demo-app ...
0 votes
1 answer
131 views

How to import local external jar having spring cloud vault client dependency

I have a "multi-module" Gradle project named "utils". In that, I have created a new sub-project that will be used as a client for Hashicorp's Vault. I'll use this jar to my Spring ...
1 vote
0 answers
292 views

Intermittent Hashicorp Vault with spring cloud Mongo

Almost all of our applications here use SpringCloud in a Kubernetes eco-system and now, due to security reasons, we decided to use the Hashicorp Vault too. All the things seem to be working but we ...
2 votes
0 answers
1k views

Spring vault configs are not being applied

I am new to Spring vault and somewhat new to Springboot, I am trying to learn this so I need help. Apologies for the very long post though. Here is my source of the Spring vault project that I have ...
1 vote
0 answers
523 views

Spring Cloud Vault Secret reading error as permission denied

I am unable to read secrets with vault when I upgrade spring version from 2.0.3.RELEASE to 2.3.5.RELEASE It works fine with 2.0.3.RELEASE (with secret path, secret/data/{app-name}), but with 2.3.5....
1 vote
2 answers
1k views

@VaultPropertySource caused VaultAutoConfiguration failure

I'm using Spring-Boot 2.4.0 and org.springframework.cloud:spring-cloud-starter-vault-config:3.0.0 Upon successful startup, I found the following thing @Bean public Object see(@Value("${...
  • 3,481
0 votes
1 answer
130 views

HashiCorp Vault multiple values for ldap.urls (list of urls)

I have configuration for spring ldap in application.yml as: ldap: urls: - ldaps://host01.acme.com:636 - ldaps://host02.acme.com:636 - ldaps://host03.acme.com:636 - ldaps://host04....
  • 1,749
2 votes
1 answer
6k views

Vault .NET - Invalid path for a versioned K/V secrets engine

I've added all my configuration details in the Vault. The detail you can see in the attached image below. This follows a specific path i.e kv/unistad/dev/workflow/camunda/1.0 However, when I try to ...
  • 241
1 vote
0 answers
68 views

How to get the ID token of user to a client application after logging in with Vault-OIDC method?

I have a web application that is in Java. I am successful in authenticating the app via google as the OIDC provider. However, I want the application to connect to google's OIDC via hashicorp vault. I ...