Questions tagged [spring-vault]
Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets from HashiCorp Vault.
121
questions
0
votes
1
answer
90
views
Vault server, how to programmatically put key/value to vault server using Java or Spring framework
I want to store some secrets/credentials during runtime in my application, similar to the following command.
vault kv put -path=secret/application key1=val1
I have reviewed the HashiCorp SDK, but it ...
1
vote
0
answers
132
views
Secrets are not read from the vault after migrating to Spring Boot 3 - Getting an error
We are in process of migrating spring boot 3 from 2.7.7(We did an incremental upgrade from 2.6.8 to 2.7.7 and then to 3.0.0). We have almost got our application working except for the secrets are not ...
0
votes
0
answers
28
views
Spring Vault - How to access KV values at custom mount point?
We have Hashicorp Vault KV v1 engine mounted at /foo instead of /v1. How do I tell Spring Vault library to use /foo? Using Spring Vault 2.3.2, Spring Boot 2.7.3, Java 11.
I pass in foo/path/to/...
0
votes
1
answer
49
views
Status 400 Bad Request: failed to revoke entry... cannot be dropped because some objects depend on it (SQLSTATE 2BP01);
I have configured my spring boot application to obtain the database credentials from the vault database backend. This is working fine when I run it with the vault in 'vault for development mode'. But, ...
0
votes
0
answers
52
views
Hw to configure spring vault to authenticate with a JWT token
I'm trying to use spring-vault-core and (optionally) spring-cloud-starter-vault-config to connect to a vault using a JWT token as the auth mechanism.
From the documentation, you can request a token ...
1
vote
1
answer
164
views
Spring Vault can't validate self-signed cert signed by self-signed CA after upgrading from Spring Boot 2.7.x -> Spring Boot 3.0.0
I am running Spring Boot app using a self-signed CA cert to verify Vault certificate that is signed by the self-signed CA.
This setup has worked with Spring Vault until upgrading from Spring Boot 2.7....
0
votes
0
answers
15
views
Spring Boot Vault Permanently remove record
How can I permanently remove a record from the vault via VaultTemplate (VaultOperations)?
When I simply autowire VaultTemplate.class in my service class and try to remove, then the record data was ...
0
votes
1
answer
169
views
Disable vault spring boot
I have a spring boot project where I wanted to disable the vault conditionally.
<dependency>
<groupId>org.springframework.vault</groupId>
<artifactId>spring-vault-core</...
0
votes
0
answers
42
views
Injecting a list of values into a @VaultPropertySource is not working
I am using spring-vault-core. I have create some list type properties in my appilication.propertis and I am trying to inject it into a member type @VaultPropertySource in one of my classes with no ...
1
vote
0
answers
189
views
Spring Cloud Vault Config Secretes Backend AWS SocketTimeoutException
I have a Spring Boot + Kotlin microservice that gets the AWS credentials to connect to DynamoDB from Vault.
But randomly the Vault implementation is throwing a SocketTimeoutException while renewing ...
2
votes
1
answer
665
views
Using multiple types of Vault secrets in one Spring boot application
Consider the following application.properties file of a Spring Boot application.
# Spring configuration parameters
spring.application.name=MyApplication
server.port=${SERVICE_PORT:8080}
# SSL ...
0
votes
2
answers
724
views
Vault UserPass authentication with Spring boot
I need to connect to Vault from my spring boot microservice. To get the vault token, the service needs to login to vault by providing username and password. Spring-vault integration doesn't support ...
2
votes
0
answers
143
views
How to decrypt a ciphertext locally using Java / Kotlin from an exported key that supported convergent encryption in hashicorp vault?
I have a usecase where I would want to keep a backup of the encryption keys in case the vault server goes down and decrypt it locally. I am using Hashicorp Transit Secrets Engine, and to test it out I ...
0
votes
0
answers
1k
views
Spring cloud config and Vault Integration
I'm trying to read secret values using spring vault. All the properties for client application is stored in github and spring config server is used to access the properties. When I add the vault ...
2
votes
0
answers
696
views
How to implement Spring Cloud Vault with multiple paths using different roles?
I already have Spring Cloud Vault set up to read from multiple paths that have a common role but now I have a requirement to read from multiple paths that may have differing roles. My existing ...
0
votes
0
answers
41
views
how can i not store the clientid/secret of vault in botstrap yml and get from Vault using app role?
I am trying to read the vault properties by putting those in bootstrap yml, but i dont want to store them there instead i want to go to vault and get them in my program.
I tried just putting roleid ...
0
votes
1
answer
166
views
How do i get Spring Vault to trust a custom TLS chain provided as PEM
I am currently using Spring Vault with TLS, which works fine. My problem is that I need to support a custom TLS chain to connect to a client's Vault instance. Using a jks is not an option, my only ...
1
vote
1
answer
1k
views
Unable to instantiate VaultConfigDataLoader
I'm trying to configure Spring Cloud Vault in my Spring Boot application (v. 2.4.2). I'm using Spring Cloud v. 2020.0.5 (which, according to the Release train, should be fine).
C:\Tools\jdk1.8.0_92\...
0
votes
1
answer
1k
views
spring cloud vault not working in newer versions
I am trying to make working hashicorp vault deployed on azure's AKS cluster with spring boot.
I tried code from this blog post: blog post
which works fine, but when I will change versions for:
<...
0
votes
1
answer
388
views
Can Spring Vault support Azure Key Vault?
From the Spring Vault official site, it supports HashiCorp’s Vault, and there are some examples with HashiCorp’s Vault.
Does it support Azure Keyvault natively?
From the azure document, springboot ...
2
votes
0
answers
814
views
How to disable SSL Verification in Spring Vault (Spring Vault Core - version: 2.3.1)
I am getting below exception:
Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://<kmaas_domain>:443/v1/auth/aws/login": ...
0
votes
0
answers
1k
views
unable to load secrets from vault when spring.cloud.vault.config.lifecycle.enabled is set to false
I am using spring cloud starter vault config of version 2.2.5.RELEASE for connecting to my secured vault server which is working on approle authentication mechanism, i observed that if i setup value ...
1
vote
0
answers
319
views
In Spring vault is it possible to get events when the database credentials are rotataed with static role type through hashicorp vault
I'm using Spring vault to fetch the database credentials from hashicorp vault. Using SecretLeaseContainer and LeaseListener i'm able to get the events when the credentials are rotated for Dynamic ...
1
vote
1
answer
539
views
Config server with Vault backend - fetch secrets from multiple paths
We are using config server with Vault backend to fetch application secrets.
Config server project is using spring-vault-core dependency and spring-vault-dependencies dependency management for Vault.
...
1
vote
1
answer
270
views
How to disable SSL verification in Spring Vault
I'm trying to configure Spring vault, and for some reason, I need to disable SSL verification. Is there any known way to configure Spring Vault to ignore SSL?
1
vote
1
answer
390
views
Adding keys to Spring Boot vault
I am implementing Spring Boot vault. Whenever I try to add more than one key, only the last one is saved. For example, at this page, https://www.javainuse.com/spring/cloud-vault, they have this ...
0
votes
0
answers
155
views
Autowired beans in EnvironmentProcessor are null
I am using spring-vault and specified PostProcessor that supposed to do some custom operations on Vault
@Profile("cloud")
@Component
public class VaultPostProcessor implements ...
1
vote
0
answers
377
views
actuator/refresh path not updating @value variables when use spring cloud vault
When I update a property in the vault and call actuator / refresh, it still shows an older value.
I use spring boot and spring cloud.
<spring-cloud-dependencies.version>2020.0.3</spring-cloud-...
0
votes
1
answer
640
views
Spring Vault returns null
I am very new to Spring Vault, and so I followed a lot of guides and YouTube videos. The problem I am facing is that I think, I am able to access the vault but when I try to retrieve the values from ...
2
votes
1
answer
781
views
How to group membership search in Hashicorp Vault
I'm trying to set up a demonstration of the Vault as a solution to my company's security concerns about very sensitive user data. I've added the ldap authentication and I'm able to login with any ldap ...
0
votes
1
answer
1k
views
Vault login token expiring unexpectedly
We operate a containerized Spring Boot application. In order to access third party APIs, secrets to those APIs are kept in a Vault instance. Our application connects to Vault via Spring Vault Core ...
1
vote
1
answer
3k
views
Spring boot cloud vault does not load properties anymore after update to version 3.0.3
I'm facing the same problem as bootstrap.yml configuration not processed anymore with Spring Cloud 2020.0.
I updated spring boot cloud to the version 3.0.3. My config is:
spring:
config:
import: ...
1
vote
1
answer
824
views
Using Spring Cloud Vault and ConfigData API with multiple profile files
I have 5 profiles for my Spring Boot application
application.yml
application-prod.yml
application-stg.yml
application-dev.yml
application-local.yml
One default config and 4 for different environments....
2
votes
1
answer
687
views
Spring Vault Integration - read secrets from multiple paths
Is it possible to read secrets stored under multiple paths/contexts in Vault from Spring Boot application?
I assume, profiles should be used, but not sure and still didn't manage to configure profiles....
0
votes
0
answers
186
views
Spring Cloud Vault with GCP-IAM Auth Method for multiple projects
I have some issue, wasn't able to find any docs, maybe I'm missing something.
We are going to use this method. I've deployed some service and Vault in GKE in one project and it works fine. I used this ...
1
vote
0
answers
775
views
Enabling debug logging for code that is run very early on in a Spring boot app
I am writing a small Spring boot app that I want to read some properties from Hashi Corp Vault which will ultimately be run in a Kubernetes environment.
I'm doing this by using the spring.cloud.vault ...
2
votes
2
answers
13k
views
Spring Boot 2.4.4 failed to start after upgrading
I am upgrading Spring boot application, which is currently working on 2.1.13 to 2.4.4.
After upgrade, spring boot application is not starting.
Few of the modules used in application are as follows:
...
1
vote
1
answer
143
views
Spring Cloud Config Vault Strange Request
We are using Spring Cloud 2.2.6.RELEASE using vault for storage for our microservices and our Vault team has complained about number of request, they provided Splunk log access and I see many request ...
0
votes
1
answer
667
views
Error with Spring AppRoleAuthentication - URI is not absolute
I'm trying to retrieve secrets from vault using the AppRole authentication. But I get the error :
java.lang.IllegalArgumentException: URI is not absolute
What I do is create a vaultEndpoint then ...
2
votes
2
answers
1k
views
Correct the classpath of your application so that it contains a single, compatible version of org.springframework.vault.support.SslConfiguration
I am developing code Spring Boot Microservices Project - Part 1 - Spring Boot Config Server & Eureka Service Discovery from - https://www.youtube.com/watch?v=Fq85GschdLw and getting the below ...
0
votes
1
answer
243
views
How to allow spring boot applications to use custom jar having spring cloud dependency
I have many spring boot microservices and I have developed a new project that has Spring-Vault as a dependency. This new project (say vault-client-spring) is developed in order to have common ...
0
votes
1
answer
571
views
How to setup @ConfigurationProperties to get the values from Hashicorp Vault what is at the address secret/demo-app/keycloak?
I started a Hashicorp Vault and my secrets can be found at secret/demo-app/keycloak. I have 2 values here: clientId, clientSecret
I setup the bootstrap.properties:
spring.application.name=demo-app
...
0
votes
1
answer
131
views
How to import local external jar having spring cloud vault client dependency
I have a "multi-module" Gradle project named "utils". In that, I have created a new sub-project that will be used as a client for Hashicorp's Vault. I'll use this jar to my Spring ...
1
vote
0
answers
292
views
Intermittent Hashicorp Vault with spring cloud Mongo
Almost all of our applications here use SpringCloud in a Kubernetes eco-system and now, due to security reasons, we decided to use the Hashicorp Vault too.
All the things seem to be working but we ...
2
votes
0
answers
1k
views
Spring vault configs are not being applied
I am new to Spring vault and somewhat new to Springboot, I am trying to learn this so I need help. Apologies for the very long post though.
Here is my source of the Spring vault project that I have ...
1
vote
0
answers
523
views
Spring Cloud Vault Secret reading error as permission denied
I am unable to read secrets with vault when I upgrade spring version from 2.0.3.RELEASE to 2.3.5.RELEASE
It works fine with 2.0.3.RELEASE (with secret path, secret/data/{app-name}), but with 2.3.5....
1
vote
2
answers
1k
views
@VaultPropertySource caused VaultAutoConfiguration failure
I'm using Spring-Boot 2.4.0 and org.springframework.cloud:spring-cloud-starter-vault-config:3.0.0
Upon successful startup, I found the following thing
@Bean
public Object see(@Value("${...
0
votes
1
answer
130
views
HashiCorp Vault multiple values for ldap.urls (list of urls)
I have configuration for spring ldap in application.yml as:
ldap:
urls:
- ldaps://host01.acme.com:636
- ldaps://host02.acme.com:636
- ldaps://host03.acme.com:636
- ldaps://host04....
2
votes
1
answer
6k
views
Vault .NET - Invalid path for a versioned K/V secrets engine
I've added all my configuration details in the Vault. The detail you can see in the attached image below. This follows a specific path i.e kv/unistad/dev/workflow/camunda/1.0
However, when I try to ...
1
vote
0
answers
68
views
How to get the ID token of user to a client application after logging in with Vault-OIDC method?
I have a web application that is in Java. I am successful in authenticating the app via google as the OIDC provider. However, I want the application to connect to google's OIDC via hashicorp vault. I ...