Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets from HashiCorp Vault.
Spring Vault provides familiar Spring abstractions and client-side support for accessing, storing and revoking secrets. It offers both low-level and high-level abstractions for interacting with Vault, freeing the user from infrastructural concerns.
With HashiCorp’s Vault you have a central place to manage external secret data for applications across all environments. Vault can manage static and dynamic secrets such as application data, username/password for remote applications/resources and provide credentials for external services such as MySQL, PostgreSQL, Apache Cassandra, Consul, AWS and more.
Features
- Spring configuration support using Java based
@Configuration
classes. VaultTemplate
andReactiveVaultTemplate
helper classes that increase productivity performing common Vault operations.- Exporting Vault secrets as
PropertySource
through@VaultPropertySource
. - Support multiple authentication methods.
- Rotation of secrets for databases and messaging services.
- Feature Rich Object Mapping integrated with Spring Data Repositories.
- Annotation based mapping metadata but extensible to support other metadata formats.