From d96de29c1e38092c107f5c2e18bb98dac924388f Mon Sep 17 00:00:00 2001 From: buildmaster Date: Thu, 14 Nov 2019 14:59:54 +0000 Subject: [PATCH] Sync docs from 2.1.x to gh-pages --- 2.1.x/multi/multi_vault.config.authentication.html | 2 +- 2.1.x/single/spring-cloud-vault.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/2.1.x/multi/multi_vault.config.authentication.html b/2.1.x/multi/multi_vault.config.authentication.html index 0ba24fd6..ed09f97b 100644 --- a/2.1.x/multi/multi_vault.config.authentication.html +++ b/2.1.x/multi/multi_vault.config.authentication.html @@ -126,7 +126,7 @@ bound to a VM instance.

authentication: AZURE_MSI azure-msi: role: my-dev-role - azure-path: aws

  • role sets the name of the role against which the login is being attempted.
  • azure-path sets the path of the Azure mount to use

Azure MSI authentication fetches environmental details about the virtual machine + azure-path: azure

  • role sets the name of the role against which the login is being attempted.
  • azure-path sets the path of the Azure mount to use

Azure MSI authentication fetches environmental details about the virtual machine (subscription Id, resource group, VM name) from the instance metadata service.

See also: Vault Documentation: Using the azure auth backend

3.7 TLS certificate authentication

The cert auth backend allows authentication using SSL/TLS client certificates that are either signed by a CA or self-signed.

To enable cert authentication you need to:

  1. Use SSL, see Chapter 9, Vault Client SSL configuration
  2. Configure a Java Keystore that contains the client certificate and the private key
  3. Set the spring.cloud.vault.authentication to CERT

Example 3.15. bootstrap.yml

spring.cloud.vault:
diff --git a/2.1.x/single/spring-cloud-vault.html b/2.1.x/single/spring-cloud-vault.html
index 7f0b8529..2a8c7382 100644
--- a/2.1.x/single/spring-cloud-vault.html
+++ b/2.1.x/single/spring-cloud-vault.html
@@ -223,7 +223,7 @@ bound to a VM instance.

     authentication: AZURE_MSI
     azure-msi:
         role: my-dev-role
-        azure-path: aws

  • role sets the name of the role against which the login is being attempted.
  • azure-path sets the path of the Azure mount to use

Azure MSI authentication fetches environmental details about the virtual machine + azure-path: azure


  • role sets the name of the role against which the login is being attempted.
  • azure-path sets the path of the Azure mount to use

Azure MSI authentication fetches environmental details about the virtual machine (subscription Id, resource group, VM name) from the instance metadata service.

See also: Vault Documentation: Using the azure auth backend

3.7 TLS certificate authentication

The cert auth backend allows authentication using SSL/TLS client certificates that are either signed by a CA or self-signed.

To enable cert authentication you need to:

  1. Use SSL, see Chapter 9, Vault Client SSL configuration
  2. Configure a Java Keystore that contains the client certificate and the private key
  3. Set the spring.cloud.vault.authentication to CERT

Example 3.15. bootstrap.yml

spring.cloud.vault: