io.quarkus.vault.VaultKVSecretEngine Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of quarkus-vault Show documentation

Store your credentials securely in HashiCorp Vault

There is a newer version: 3.0.0.Beta1

package io.quarkus.vault;

import java.util.Map;

import io.quarkus.vault.runtime.config.VaultRuntimeConfig;

/**
 * This service provides access to the kv secret engine, taking care of authentication,
 * and token extension or renewal, according to ttl and max-ttl.
 *
 * @see VaultRuntimeConfig
 */
public interface VaultKVSecretEngine {

    /**
     * Provides the values stored in the Vault kv secret engine at a particular path.
     *
     * @param path in Vault, without the kv engine mount path
     * @return list of key value pairs stored at 'path' in Vault
     */
    Map readSecret(String path);

    /**
     * Writes the secret at the given path. If the path does not exist, the secret will
     * be created. If not the new secret will be merged with the existing one.
     * 
     * @param path in Vault, without the kv engine mount path
     * @param secret to write at path
     */
    void writeSecret(String path, Map secret);

    /**
     * Deletes the secret at the given path. It has no effect if no secret is currently
     * stored at path.
     * 
     * @param path to delete
     */
    void deleteSecret(String path);

}