Package io.quarkus.vault.runtime.config

Interface CredentialsProviderConfig

  • public interface CredentialsProviderConfig

    • Method Detail

      • databaseCredentialsRole

        @Deprecated(since="2.6")
Optional<String> databaseCredentialsRole()
        Deprecated.
        Use `credentials-role` with `credentials-mount` set to `database`
        Database credentials role, as defined by Vault Databases

        Only one of `database-credentials-role`, `credentials-role` or `kv-path` can be defined.

      • credentialsRole

        Optional<String> credentialsRole()
        Dynamic credentials' role.

        Roles are defined by the secret engine in use. For example, `database` credentials roles are defined by the database secrets engine described at Vault Databases.

        One of `credentials-role` or `kv-path` can to be defined. not both.

      • credentialsMount

        @WithDefault("database")
String credentialsMount()
        Mount of dynamic credentials secrets engine, for example `database` or `rabbitmq`.

        Only used when `credentials-role` is defined.

      • credentialsRequestPath

        @WithDefault("creds")
String credentialsRequestPath()
        Path of dynamic credentials request.

        Request paths are dictated by the secret engine in use. For standard secret engines this should be left as the default of `creds`.

        Only used when `credentials-role` is defined.

      • kvPath

        Optional<String> kvPath()
        A path in vault kv store, where we will find the kv-key.

        One of `database-credentials-role` or `kv-path` needs to be defined. not both.

        see KV Secrets Engine

      • kvKey

        @WithDefault("password")
String kvKey()
        Key name to search in vault path `kv-path`. The value for that key is the credential.

        `kv-key` should not be defined if `kv-path` is not.

        see KV Secrets Engine