Interface VaultAuthenticationConfig


  • public interface VaultAuthenticationConfig
    • Method Detail

      • clientToken

        Optional<String> clientToken()
        Vault token, bypassing Vault authentication (kubernetes, userpass or approle). This is useful in development where an authentication mode might not have been set up. In production we will usually prefer some authentication such as userpass, or preferably kubernetes, where Vault tokens get generated with a TTL and some ability to revoke them. Lease renewal does not apply.
      • clientTokenWrappingToken

        Optional<String> clientTokenWrappingToken()
        Client token wrapped in a wrapping token, such as what is returned by:

        vault token create -wrap-ttl=60s -policy=myapp

        client-token and client-token-wrapping-token are exclusive. Lease renewal does not apply.

      • isDirectClientToken

        default boolean isDirectClientToken()
      • isAppRole

        default boolean isAppRole()
      • isUserpass

        default boolean isUserpass()