ConfigVaultProvider (security.providers.config.vault) Configuration

Secrets and encryption provider using configuration

Type: io.helidon.security.providers.config.vault.ConfigVaultProvider

Config key
config-vault
Copied

This type provides the following service implementations:

  • io.helidon.security.spi.SecurityProvider

  • io.helidon.security.spi.SecretsProvider

  • io.helidon.security.spi.EncryptionProvider

Configuration options

Required configuration options
keytypedefault valuedescription
master-password

string

 

Master password used for encryption and decryption. If the master password cannot be obtained from this option, configuration, a system property, or an environment variable, encryption and decryption are not supported.

Optional configuration options
keytypedefault valuedescription
legacy-encryption

boolean

false

Whether to write encrypted data using the legacy encrypted-value format during a rolling upgrade. Leave disabled for steady-state deployments.

legacy-fallback

boolean

false

Whether decryption should retry with the alternate encrypted-value format after primary decryption fails. Disable after legacy encrypted values are replaced.