Package io.quarkus.vault.runtime.config

Class VaultAuthenticationConfig

  • public class VaultAuthenticationConfig
extends Object

    • Field Detail

      • clientToken

        @ConfigItem
public Optional<String> clientToken
        Vault token, bypassing Vault authentication (kubernetes, userpass or approle). This is useful in development where an authentication mode might not have been set up. In production we will usually prefer some authentication such as userpass, or preferably kubernetes, where Vault tokens get generated with a TTL and some ability to revoke them. Lease renewal does not apply.

      • clientTokenWrappingToken

        @ConfigItem
public Optional<String> clientTokenWrappingToken
        Client token wrapped in a wrapping token, such as what is returned by:

        vault token create -wrap-ttl=60s -policy=myapp

        client-token and client-token-wrapping-token are exclusive. Lease renewal does not apply.

      • appRole

        @ConfigItem
public VaultAppRoleAuthenticationConfig appRole
        AppRole authentication method

        See https://www.vaultproject.io/api/auth/approle/index.html

      • userpass

        @ConfigItem
public VaultUserpassAuthenticationConfig userpass
        Userpass authentication method

        See https://www.vaultproject.io/api/auth/userpass/index.html

    • Constructor Detail

      • VaultAuthenticationConfig

        public VaultAuthenticationConfig()

    • Method Detail

      • isDirectClientToken

        public boolean isDirectClientToken()

      • isAppRole

        public boolean isAppRole()

      • isUserpass

        public boolean isUserpass()