io.quarkus.vault.runtime.config.VaultAuthenticationConfig Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of quarkus-vault Show documentation

Store your credentials securely in HashiCorp Vault

There is a newer version: 3.0.0.Beta1

package io.quarkus.vault.runtime.config;

import java.util.Optional;

import io.quarkus.runtime.annotations.ConfigGroup;
import io.quarkus.runtime.annotations.ConfigItem;

@ConfigGroup
public class VaultAuthenticationConfig {

    /**
     * Vault token, bypassing Vault authentication (kubernetes, userpass or approle). This is useful in development
     * where an authentication mode might not have been set up. In production we will usually prefer some
     * authentication such as userpass, or preferably kubernetes, where Vault tokens get generated with a TTL
     * and some ability to revoke them.
     */
    @ConfigItem
    public Optional clientToken;

    /**
     * AppRole authentication method
     * 
     * See https://www.vaultproject.io/api/auth/approle/index.html
     */
    @ConfigItem
    public VaultAppRoleAuthenticationConfig appRole;

    /**
     * Userpass authentication method
     * 

     * See https://www.vaultproject.io/api/auth/userpass/index.html
     */
    @ConfigItem
    public VaultUserpassAuthenticationConfig userpass;

    /**
     * Kubernetes authentication method
     * 
     * See https://www.vaultproject.io/docs/auth/kubernetes.html
     */
    @ConfigItem
    public VaultKubernetesAuthenticationConfig kubernetes;

}