spring-cloud-vault icon indicating copy to clipboard operation
spring-cloud-vault copied to clipboard

unable to load secrets from vault when spring.cloud.vault.config.lifecycle.enabled is set to false

Open omtonape opened this issue 3 years ago • 0 comments

Hi, I am using spring cloud starter vault config of version 2.2.5.RELEASE for connecting to my secured vault server which is working on approle authentication mechanism, i observed that if i setup value to false for property spring.cloud.vault.config.lifecycle.enabled spring is unable to load secrets from vault its failing with below error:

17:27:05.823 DEBUG [ main] o.s.v.a.AppRoleAuthentication - - Login successful using AppRole authentication 17:27:06.121 WARN [ main] o.s.c.v.config.VaultConfigTemplate - - Could not locate PropertySource: Status 403 Forbidden [/*/local]: 1 error occurred: * permission denied

below is my bootstrap.properties configuration: #Project Details info.app.name = **** info.app.version = @project.version@

spring.application.name = ***

logging.level.org.springframework.vault = TRACE

spring.cloud.vault.app-role.auth-path=approle spring.cloud.vault.app-role.role-id=**** spring.cloud.vault.app-role.secret-id=**** spring.cloud.vault.authentication=APPROLE spring.cloud.vault.generic.application-name=**** spring.cloud.vault.generic.backend=*** spring.cloud.vault.generic.enabled=false spring.cloud.vault.host=**** spring.cloud.vault.kv.application-name=**** spring.cloud.vault.kv.backend=**** spring.cloud.vault.kv.enabled=true spring.cloud.vault.kv.profile-separator=/ spring.cloud.vault.port=8200 spring.cloud.vault.scheme=https spring.cloud.vault.ssl.trust-store=.jks spring.cloud.vault.ssl.trust-store-password=*** management.health.vault.enabled = false spring.cloud.vault.config.lifecycle.enabled=false

Note if spring.cloud.vault.config.lifecycle.enabled is set to true then it is able to load secrets from vault.

omtonape avatar Mar 15 '22 13:03 omtonape