ClientHttpRequestFactory
to not expose the bean globally.LeaseErrorListener
to the container.LeaseListener
to the container.RequestedSecret
.Lease
for a RequestedSecret
.Lease
for a RequestedSecret
.after
transformer.ClientAuthentication
.AppIdAuthentication
.AppIdAuthenticationOptions
.ClientAuthentication
.AppRoleAuthentication
.AppRoleAuthenticationOptions
.AuthenticationSteps.HttpRequest
object.VaultToken
.AuthenticationSteps.HttpRequest
.AuthenticationSteps
using RestOperations
to
login using authentication flows.AuthenticationSteps
.VaultMount
to path
.path
.AwsEc2Authentication
.AwsEc2Authentication
specifying
AwsEc2AuthenticationOptions
, a Vault and an AWS-Metadata-specific
RestOperations
.AwsEc2Authentication
.AwsIamAuthentication
specifying
AwsIamAuthenticationOptions
, a Vault and an AWS-Metadata-specific
RestOperations
.AwsIamAuthentication
.AwsIamAuthenticationOptions
.Lease
for a RequestedSecret
.AppIdAuthenticationOptions
instance.AppRoleAuthenticationOptions
instance.AwsEc2AuthenticationOptions
instance.AwsIamAuthenticationOptions
instance.CubbyholeAuthenticationOptions
instance.VaultCertificateRequest
instance.VaultMount
instance.VaultTokenRequest
instance.VaultTransitContext
instance.VaultTransitKeyConfiguration
instance.VaultTransitKeyCreationRequest
instance.VaultException
given HttpStatusCodeException
.VaultTokenSupplier
caching the VaultToken
from a delegate VaultTokenSupplier
.ClientAuthentication
provides VaultToken
to be used for authenticated
Vault access.Bean
in case you want to expose a
ClientAuthentication
instance to the
ApplicationContext
.ClientAuthentication
.ClientCertificateAuthentication
using RestOperations
.ClientHttpConnector
that supports
ReactorClientHttpConnector
.ClientHttpRequestFactory
that supports Apache HTTP Components,
OkHttp, Netty and the JDK HTTP client (in that order).AbstractVaultConfiguration.ClientFactoryWrapper
containing a ClientHttpRequestFactory
.ClientOptions
with default timeouts of 5
TimeUnit.SECONDS
connection timeout and 15
TimeUnit.SECONDS
read timeout.ClientOptions.ClientOptions(Duration, Duration)
for time unit
safety.ClientOptions
.name
.transit
operation.VaultTokenRequest
.SslConfiguration.create(Resource, char[], Resource, char[])
to
prevent String
interning and retaining passwords represented as String
longer from GC than necessary.SslConfiguration
for the given truststore with the default
KeyStore
type.VaultCertificateRequest
given a commonName
.secretShares
and
secretThreshold
.VaultMount
given a type
.AuthenticationSteps
for AppId authentication given
AppIdAuthenticationOptions
.AuthenticationSteps
for AppRole authentication given
AppRoleAuthenticationOptions
.AuthenticationSteps
for AWS-EC2 authentication given
AwsEc2AuthenticationOptions
.AuthenticationSteps
for client certificate authentication.AuthenticationSteps
for cubbyhole authentication given
CubbyholeAuthenticationOptions
.AuthenticationSteps
for token authentication given
VaultToken
.name
.name
and
VaultTransitKeyCreationRequest
.KeyStore
from this CertificateBundle
containing the
private key and certificate chain.VaultTokenRequest
.RestTemplate
for Vault interaction.URI
based on the given path
.path
.AWSCredentialsProvider
, required to calculate the
signature.ClientAuthentication
implementation.CubbyholeAuthentication
.CubbyholeAuthenticationOptions
.SecretLeaseContainer
, disable lease renewal and revoke
leases.VaultOperations
.Lease
for a RequestedSecret
.Lease
.PropertyTransformer
.PropertyTransformer
.RestOperationsCallback
.RestOperationsCallback
.RestOperationsCallback
.RestOperationsCallback
.Environment
to
configure Spring Vault endpoint, SSL options and authentication options.VaultTokenRequest.VaultTokenRequestBuilder.explicitMaxTtl(Duration)
for time unit
safety.LifecycleAwareSessionManager.FixedTimeoutRefreshTrigger
to calculate execution times of
timeout
before the LoginToken
expiresLifecycleAwareSessionManager.FixedTimeoutRefreshTrigger
to calculate execution times of
timeout
before the LoginToken
expiresSslConfiguration.forKeyStore(Resource, char[])
to prevent
String
interning and retaining passwords represented as String longer from
GC than necessary.SslConfiguration
for the given key store with the default
KeyStore
type.SslConfiguration.forTrustStore(Resource, char[])
to prevent
String
interning and retaining passwords represented as String longer from
GC than necessary.SslConfiguration
for the given trust store with the default
KeyStore
type.VaultEndpoint
given a URI
.HttpHeaders
given VaultToken
.VaultTransitContext
given context
bytes.AuthenticationSteps.HttpRequest
.VaultTransitContext
given nonce
bytes.Supplier
.Lease.fromTimeToLive(Duration)
for time unit safety.Lease
, without a leaseId
and specified
duration.AwsEc2AuthenticationOptions.Nonce
using UUID
.GET
from uriTemplate
.GET
from uri
.AuthenticationSteps
describing an authentication flow.Environment
to access property sources during Spring Vault
bootstrapping.List
of transit key names.SslConfiguration.KeyStoreConfiguration.getStorePassword()
to
prevent String
interning and retaining passwords represented as String
longer from GC than necessary.KeySpec
.VaultToken
from the VaultResponse
.SslConfiguration.KeyStoreConfiguration.getStorePassword()
to
prevent String
interning and retaining passwords represented as String
longer from GC than necessary.ParameterizedTypeReference
for responseType
.VaultEndpoint
.VaultToken
.X509Certificate
.X509Certificate
.SecretLeaseEvent
.URI
.VaultInitializationRequest
.VaultToken
to access Cubbyhole.roleName
and VaultCertificateRequest
.VaultToken
.AuthenticationSteps.HttpRequest
returning a
VaultResponse
.SslConfiguration.KeyStoreConfiguration
.PropertySource
that requests renewable secrets from
SecretLeaseContainer
.SecretLeaseEvent
s.SecretLeaseEvent
s.LeaseListener
and
LeaseErrorListener
.LifecycleAwareSessionManager
given ClientAuthentication
,
AsyncTaskExecutor
and RestOperations
.LifecycleAwareSessionManager
given ClientAuthentication
,
AsyncTaskExecutor
and RestOperations
.LifecycleAwareSessionManager.RefreshTrigger
implementation using a fixed timeout to schedule renewal
before a LoginToken
expires.token
from Vault by posting
the current state to Vaults uriTemplate
.token
from Vault by issuing
a HTTP request with the current state to Vaults uriTemplate
.VaultToken
.ClientAuthentication
to a LoginToken
.MacAddressUserId
using a networkInterfaceIndex
.MacAddressUserId
using a networkInterfaceName
.VaultMount
to path
.AwsEc2AuthenticationOptions.Nonce
for login requests.transit
operation.Lease
.CachingVaultTokenSupplier
given a delegate supplier
.LoginToken
.LoginToken
.LoginToken.of(char[], Duration)
for time unit safety.LoginToken.of(char[], Duration)
for time unit safety.LoginToken
with a leaseDurationSeconds
.VaultEndpointProvider
given VaultEndpoint
.Lease.of(String, Duration, boolean)
for time unit
safety.Lease
.CertificateBundle
given a private key with certificates and the
serial number.SslConfiguration.KeyStoreConfiguration
given Resource
.SslConfiguration.KeyStoreConfiguration
given Resource
and
storePassword
using the default keystore type.VaultToken
.VaultToken
.Lease
is renewed.Lease
.Lease
.SecretLeaseEvent
SecretLeaseEvent
Lease
expires.Lease
expires.VaultPkiOperations
if the PKI backend is mounted on a different path
than pki
.VaultTransitOperations
if the transit backend is mounted on a
different path than transit
.cubbyhole/token
.POST
to uriTemplate
.POST
to uri
.Map
in a
functional style.PropertyTransformer
that provide various useful property
transformation operations, prefixing, etc.AwsEc2AuthenticationOptions.Nonce
given a nonce
value.transit
backend.WebClient
configured to the needs of accessing
Vault.ReactiveVaultTemplate
.ReactiveVaultTemplate
.ReactiveVaultTemplate
with a VaultEndpoint
,
ClientHttpConnector
and VaultTokenSupplier
.ReactiveVaultTemplate
with a VaultEndpointProvider
,
ClientHttpConnector
and VaultTokenSupplier
.LeaseErrorListener
.LeaseListener
.VaultToken
.LoginToken.renewable(char[], Duration)
for time unit
safety.LoginToken.renewable(char[], Duration)
for time unit
safety.LoginToken
with a leaseDurationSeconds
.RequestedSecret
at path
.AuthenticationSteps.HttpRequest
.RequestedSecret.Mode
.path
.path
.RestOperations
object configured for Vault usage.RestOperations
.VaultToken
.VaultToken
but not its child tokens.RequestedSecret
at path
.secretId
.Lease
.SecretLeaseContainer
given VaultOperations
.Lease
.Exception
during secret retrieval and lease
interaction.Lease
based events associated with
RequestedSecret
.SecretLeaseEvent
s.LeaseErrorListener
implementation to log errors.Lease
for a RequestedSecret
was
observed.VaultToken
.LifecycleAwareSessionManager
using
AbstractVaultConfiguration.clientAuthentication()
.SecretLeaseContainer.setExpiryThreshold(Duration)
for time unit
safety.SecretLeaseContainer.setMinRenewal(Duration)
for time unit safety.SessionManager
.TaskScheduler
to use for scheduling and execution of lease
renewals.SessionManager
.SimpleSessionManager
using a ClientAuthentication
.VaultEndpointProvider
returning a static VaultEndpoint
.SslConfiguration.SslConfiguration(KeyStoreConfiguration, KeyStoreConfiguration)
to prevent
String
interning and retaining passwords represented as String longer from
GC than necessary.SslConfiguration
.SecretLeaseContainer
.StaticUserId
for a given userId
.SecretLeaseContainer
.ClientAuthentication
method.TokenAuthentication
with a static token
.TokenAuthentication
with a static token
.String/Object
map to a String/String
map.String/Object
map to a String/String
map.VaultCertificateRequest.VaultCertificateRequestBuilder.ttl(Duration)
for time unit safety.VaultTokenRequest.VaultTokenRequestBuilder.ttl(Duration)
for time unit safety.ChronoUnit
resolution.SslConfiguration.KeyStoreConfiguration
.SslConfiguration
instance.path
.AppIdUserIdMechanism
.X-Vault-Token
header field name.RestTemplate
configured to the needs of
accessing Vault.VaultEndpoint
.NestedRuntimeException
implementation.VaultException
with the specified detail message.NestedRuntimeException
with the specified detail message and
nested exception.VaultMount
.VaultTemplate
.VaultPkiOperations
.VaultPropertySource
to Spring's
Environment
.VaultPropertySource
annotations.VaultException
.VaultSysOperations
.VaultSysTemplate
with the given VaultOperations
.VaultTemplate
.VaultTemplate
with a VaultEndpointProvider
,
ClientHttpRequestFactory
and SessionManager
.VaultTokenRequest
.VaultTokenSupplier
provides a VaultToken
to be used for authenticated
Vault access.VaultTokenSupplier
using AbstractVaultConfiguration.clientAuthentication()
.VaultTokenOperations
.VaultTokenTemplate
with the given VaultOperations
.VaultTransitContext
.transit
backend.VaultTransitKeyConfiguration
.VaultTransitKeyCreationRequest
.transit
backend.VaultTransitOperations
.entity
.headers
.SslConfiguration
with SslConfiguration.KeyStoreConfiguration
applied
retaining the trust store
configuration.SslConfiguration
with trust store
configuration
applied retaining the SslConfiguration.getKeyStoreConfiguration()
key store}
configuration.Copyright © 2016–2017 Pivotal Software, Inc.. All rights reserved.