org.springframework.vault.core

Class VaultTemplate

java.lang.Object

org.springframework.vault.core.VaultTemplate

All Implemented Interfaces:

DisposableBean, InitializingBean, VaultOperations

public class VaultTemplate
extends Object
implements InitializingBean, VaultOperations, DisposableBean

This class encapsulates main Vault interaction. VaultTemplate will log into Vault on initialization and use the token throughout the whole lifetime.

Author:

Mark Paluch

See Also:

SessionManager

Constructor Summary

Constructors

Constructor and Description
VaultTemplate(VaultEndpoint vaultEndpoint, ClientAuthentication clientAuthentication) Create a new VaultTemplate with a VaultEndpoint and ClientAuthentication.
VaultTemplate(VaultEndpoint vaultEndpoint, ClientHttpRequestFactory clientHttpRequestFactory, SessionManager sessionManager) Create a new VaultTemplate with a VaultEndpoint, ClientHttpRequestFactory and SessionManager.
VaultTemplate(VaultEndpointProvider endpointProvider, ClientHttpRequestFactory clientHttpRequestFactory, SessionManager sessionManager) Create a new VaultTemplate with a VaultEndpointProvider, ClientHttpRequestFactory and SessionManager.

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
void	delete(String path) Delete a path.
void	destroy()
<T> T	doWithSession(RestOperationsCallback<T> sessionCallback) Executes a Vault RestOperationsCallback.
<T> T	doWithVault(RestOperationsCallback<T> clientCallback) Executes a Vault RestOperationsCallback.
List<String>	list(String path) Enumerate keys from a Vault path.
VaultPkiOperations	opsForPki()
VaultPkiOperations	opsForPki(String path) Return VaultPkiOperations if the PKI backend is mounted on a different path than pki.
VaultSysOperations	opsForSys()
VaultTokenOperations	opsForToken()
VaultTransitOperations	opsForTransit()
VaultTransitOperations	opsForTransit(String path) Return VaultTransitOperations if the transit backend is mounted on a different path than transit.
VaultResponse	read(String path) Read from a Vault path.
<T> VaultResponseSupport<T>	read(String path, Class<T> responseType) Read from a secret backend.
void	setSessionManager(SessionManager sessionManager) Set the SessionManager.
VaultResponse	write(String path, Object body) Write to a Vault path.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.vault.core.VaultOperations

write

Constructor Detail

VaultTemplate

public VaultTemplate(VaultEndpoint vaultEndpoint,
                     ClientAuthentication clientAuthentication)

Create a new VaultTemplate with a VaultEndpoint and ClientAuthentication.

Parameters:

vaultEndpoint - must not be null.

clientAuthentication - must not be null.

VaultTemplate

public VaultTemplate(VaultEndpoint vaultEndpoint,
                     ClientHttpRequestFactory clientHttpRequestFactory,
                     SessionManager sessionManager)

Create a new VaultTemplate with a VaultEndpoint, ClientHttpRequestFactory and SessionManager.

Parameters:

vaultEndpoint - must not be null.

clientHttpRequestFactory - must not be null.

sessionManager - must not be null.

VaultTemplate

public VaultTemplate(VaultEndpointProvider endpointProvider,
                     ClientHttpRequestFactory clientHttpRequestFactory,
                     SessionManager sessionManager)

Create a new VaultTemplate with a VaultEndpointProvider, ClientHttpRequestFactory and SessionManager.

Parameters:

endpointProvider - must not be null.

clientHttpRequestFactory - must not be null.

sessionManager - must not be null.

Since:

1.1

Method Detail

setSessionManager

public void setSessionManager(SessionManager sessionManager)

Set the SessionManager.

Parameters:

sessionManager - must not be null.

afterPropertiesSet

public void afterPropertiesSet()

Specified by:

afterPropertiesSet in interface InitializingBean

destroy

public void destroy()
             throws Exception

Specified by:

destroy in interface DisposableBean

Throws:

Exception

opsForSys

public VaultSysOperations opsForSys()

Specified by:

opsForSys in interface VaultOperations

Returns:

the operations interface administrative Vault access.

opsForToken

public VaultTokenOperations opsForToken()

Specified by:

opsForToken in interface VaultOperations

Returns:

the operations interface to interact with Vault token.

opsForTransit

public VaultTransitOperations opsForTransit()

Specified by:

opsForTransit in interface VaultOperations

Returns:

the operations interface to interact with the Vault transit backend.

opsForTransit

public VaultTransitOperations opsForTransit(String path)

Description copied from interface: VaultOperations

Return VaultTransitOperations if the transit backend is mounted on a different path than transit.

Specified by:

opsForTransit in interface VaultOperations

Parameters:

path - the mount path

Returns:

the operations interface to interact with the Vault transit backend.

opsForPki

public VaultPkiOperations opsForPki()

Specified by:

opsForPki in interface VaultOperations

Returns:

the operations interface to interact with the Vault PKI backend.

opsForPki

public VaultPkiOperations opsForPki(String path)

Description copied from interface: VaultOperations

Return VaultPkiOperations if the PKI backend is mounted on a different path than pki.

Specified by:

opsForPki in interface VaultOperations

Parameters:

path - the mount path

Returns:

the operations interface to interact with the Vault PKI backend.

read

public VaultResponse read(String path)

Description copied from interface: VaultOperations

Read from a Vault path. Reading data using this method is suitable for API calls/secret backends that do not require a request body.

Specified by:

read in interface VaultOperations

Parameters:

path - must not be null.

Returns:

the data. May be null if the path does not exist.

read

@Nullable
public <T> VaultResponseSupport<T> read(String path,
                                                  Class<T> responseType)

Description copied from interface: VaultOperations

Read from a secret backend. Reading data using this method is suitable for secret backends that do not require a request body.

Specified by:

read in interface VaultOperations

Parameters:

path - must not be null.

responseType - must not be null.

Returns:

the data. May be null if the path does not exist.

list

@Nullable
public List<String> list(String path)

Description copied from interface: VaultOperations

Enumerate keys from a Vault path.

Specified by:

list in interface VaultOperations

Parameters:

path - must not be null.

Returns:

the data. May be null if the path does not exist.

write

@Nullable
public VaultResponse write(String path,
                                     @Nullable
                                     Object body)

Description copied from interface: VaultOperations

Write to a Vault path.

Specified by:

write in interface VaultOperations

Parameters:

path - must not be null.

body - the body, may be null if absent.

Returns:

the response, may be null.

delete

public void delete(String path)

Description copied from interface: VaultOperations

Delete a path.

Specified by:

delete in interface VaultOperations

Parameters:

path - must not be null.

doWithVault

public <T> T doWithVault(RestOperationsCallback<T> clientCallback)

Description copied from interface: VaultOperations

Executes a Vault RestOperationsCallback. Allows to interact with Vault using RestOperations without requiring a session.

Specified by:

doWithVault in interface VaultOperations

Parameters:

clientCallback - the request.

Returns:

the RestOperationsCallback return value.

doWithSession

public <T> T doWithSession(RestOperationsCallback<T> sessionCallback)

Description copied from interface: VaultOperations

Executes a Vault RestOperationsCallback. Allows to interact with Vault in an authenticated session.

Specified by:

doWithSession in interface VaultOperations

Parameters:

sessionCallback - the request.

Returns:

the RestOperationsCallback return value.