Package io.quarkus.vault.runtime.config

Class VaultAuthenticationConfig

java.lang.Object

io.quarkus.vault.runtime.config.VaultAuthenticationConfig

public class VaultAuthenticationConfig
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
VaultAppRoleAuthenticationConfig	appRole	AppRole authentication method
Optional<String>	clientToken	Vault token, bypassing Vault authentication (kubernetes, userpass or approle).
Optional<String>	clientTokenWrappingToken	Client token wrapped in a wrapping token, such as what is returned by:
VaultKubernetesAuthenticationConfig	kubernetes	Kubernetes authentication method
VaultUserpassAuthenticationConfig	userpass	Userpass authentication method

Constructor Summary

Constructors

Constructor	Description
VaultAuthenticationConfig()

Method Summary

Modifier and Type	Method	Description
boolean	isAppRole()
boolean	isDirectClientToken()
boolean	isUserpass()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

clientToken

@ConfigItem
public Optional<String> clientToken

Vault token, bypassing Vault authentication (kubernetes, userpass or approle). This is useful in development where an authentication mode might not have been set up. In production we will usually prefer some authentication such as userpass, or preferably kubernetes, where Vault tokens get generated with a TTL and some ability to revoke them. Lease renewal does not apply.

clientTokenWrappingToken

@ConfigItem
public Optional<String> clientTokenWrappingToken

Client token wrapped in a wrapping token, such as what is returned by:

vault token create -wrap-ttl=60s -policy=myapp

client-token and client-token-wrapping-token are exclusive. Lease renewal does not apply.

appRole

@ConfigItem
public VaultAppRoleAuthenticationConfig appRole

AppRole authentication method

See https://www.vaultproject.io/api/auth/approle/index.html

userpass

@ConfigItem
public VaultUserpassAuthenticationConfig userpass

Userpass authentication method

See https://www.vaultproject.io/api/auth/userpass/index.html

kubernetes

@ConfigItem
public VaultKubernetesAuthenticationConfig kubernetes

Kubernetes authentication method

See https://www.vaultproject.io/docs/auth/kubernetes.html

Constructor Detail

VaultAuthenticationConfig

public VaultAuthenticationConfig()

Method Detail

isDirectClientToken

public boolean isDirectClientToken()

isAppRole

public boolean isAppRole()

isUserpass

public boolean isUserpass()