Added support for Vault's 0.10.0+ versioning enabled kv engine. (#1018)

This commit is contained in:
Haroun Pacquée
2018-06-04 23:13:27 +02:00
committed by Ryan Baxter
parent b10135c1ee
commit e6b2d9eec0
9 changed files with 502 additions and 100 deletions

View File

@@ -546,12 +546,17 @@ The following table describes configurable Vault properties:
|profileSeparator
|,
|kvVersion
|1
|===
IMPORTANT: All of the properties in the preceding table must be prefixed with `spring.cloud.config.server.vault`.
All configurable properties can be found in `org.springframework.cloud.config.server.environment.VaultEnvironmentRepository`.
Vault 0.10.0 introduced a versioned key-value backend (k/v backend version 2) that exposes a different API than earlier versions, it now requires a `data/` between the mount path and the actual context path and wraps secrets in a `data` object. Setting `kvVersion=2` will take this into account.
With your config server running, you can make HTTP requests to the server to retrieve
values from the Vault backend.
To do so, you need a token for your Vault server.