spring.cloud.vault.app-id.app-id-pathspring-doc.cn

app-idspring-doc.cn

Mount path of the AppId authentication backend.spring-doc.cn

spring.cloud.vault.app-id.network-interfacespring-doc.cn

Network interface hint for the "MAC_ADDRESS" UserId mechanism.spring-doc.cn

spring.cloud.vault.app-id.user-idspring-doc.cn

MAC_ADDRESSspring-doc.cn

UserId mechanism. Can be either "MAC_ADDRESS", "IP_ADDRESS", a string or a class name.spring-doc.cn

spring.cloud.vault.app-role.app-role-pathspring-doc.cn

approlespring-doc.cn

Mount path of the AppRole authentication backend.spring-doc.cn

spring.cloud.vault.app-role.rolespring-doc.cn

Name of the role, optional, used for pull-mode.spring-doc.cn

spring.cloud.vault.app-role.role-idspring-doc.cn

The RoleId.spring-doc.cn

spring.cloud.vault.app-role.secret-idspring-doc.cn

The SecretId.spring-doc.cn

spring.cloud.vault.application-namespring-doc.cn

applicationspring-doc.cn

Application name for AppId authentication.spring-doc.cn

spring.cloud.vault.authenticationspring-doc.cn

spring.cloud.vault.aws-ec2.aws-ec2-pathspring-doc.cn

aws-ec2spring-doc.cn

Mount path of the AWS-EC2 authentication backend.spring-doc.cn

spring.cloud.vault.aws-ec2.identity-documentspring-doc.cn

169.254.169.254/latest/dynamic/instance-identity/pkcs7spring-doc.cn

URL of the AWS-EC2 PKCS7 identity document.spring-doc.cn

spring.cloud.vault.aws-ec2.noncespring-doc.cn

Nonce used for AWS-EC2 authentication. An empty nonce defaults to nonce generation.spring-doc.cn

spring.cloud.vault.aws-ec2.rolespring-doc.cn

Name of the role, optional.spring-doc.cn

spring.cloud.vault.aws-iam.aws-pathspring-doc.cn

awsspring-doc.cn

Mount path of the AWS authentication backend.spring-doc.cn

spring.cloud.vault.aws-iam.endpoint-urispring-doc.cn

STS server URI. @since 2.2spring-doc.cn

spring.cloud.vault.aws-iam.rolespring-doc.cn

Name of the role, optional. Defaults to the friendly IAM name if not set.spring-doc.cn

spring.cloud.vault.aws-iam.server-namespring-doc.cn

Name of the server used to set {@code X-Vault-AWS-IAM-Server-ID} header in the headers of login requests.spring-doc.cn

spring.cloud.vault.aws.access-key-propertyspring-doc.cn

cloud.aws.credentials.accessKeyspring-doc.cn

Target property for the obtained access key.spring-doc.cn

spring.cloud.vault.aws.backendspring-doc.cn

awsspring-doc.cn

aws backend path.spring-doc.cn

spring.cloud.vault.aws.credential-typespring-doc.cn

aws credential typespring-doc.cn

spring.cloud.vault.aws.enabledspring-doc.cn

falsespring-doc.cn

Enable aws backend usage.spring-doc.cn

spring.cloud.vault.aws.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.aws.role-arnspring-doc.cn

Role arn for assumed_role in case we have multiple roles associated with the vault role. @since 3.0.2spring-doc.cn

spring.cloud.vault.aws.secret-key-propertyspring-doc.cn

cloud.aws.credentials.secretKeyspring-doc.cn

Target property for the obtained secret key.spring-doc.cn

spring.cloud.vault.aws.session-token-key-propertyspring-doc.cn

cloud.aws.credentials.sessionTokenspring-doc.cn

Target property for the obtained secret key.spring-doc.cn

spring.cloud.vault.aws.ttlspring-doc.cn

0spring-doc.cn

TTL for sts tokens. Defaults to whatever the vault Role may have for Max. Also limited to what AWS supports to be the max for STS. @since 3.0.2spring-doc.cn

spring.cloud.vault.azure-msi.azure-pathspring-doc.cn

azurespring-doc.cn

Mount path of the Azure MSI authentication backend.spring-doc.cn

spring.cloud.vault.azure-msi.identity-token-servicespring-doc.cn

Identity token service URI. @since 3.0spring-doc.cn

spring.cloud.vault.azure-msi.metadata-servicespring-doc.cn

Instance metadata service URI. @since 3.0spring-doc.cn

spring.cloud.vault.azure-msi.rolespring-doc.cn

Name of the role.spring-doc.cn

spring.cloud.vault.cassandra.backendspring-doc.cn

cassandraspring-doc.cn

Cassandra backend path.spring-doc.cn

spring.cloud.vault.cassandra.enabledspring-doc.cn

falsespring-doc.cn

Enable cassandra backend usage.spring-doc.cn

spring.cloud.vault.cassandra.password-propertyspring-doc.cn

spring.data.cassandra.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.cassandra.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.cassandra.static-rolespring-doc.cn

falsespring-doc.cn

Enable static role usage. @since 2.2spring-doc.cn

spring.cloud.vault.cassandra.username-propertyspring-doc.cn

spring.data.cassandra.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.config.lifecycle.enabledspring-doc.cn

truespring-doc.cn

Enable lifecycle management.spring-doc.cn

spring.cloud.vault.config.lifecycle.expiry-thresholdspring-doc.cn

The expiry threshold. {@link Lease} is renewed the given {@link Duration} before it expires. @since 2.2spring-doc.cn

spring.cloud.vault.config.lifecycle.lease-endpointsspring-doc.cn

Set the {@link LeaseEndpoints} to delegate renewal/revocation calls to. {@link LeaseEndpoints} encapsulates differences between Vault versions that affect the location of renewal/revocation endpoints. Can be {@link LeaseEndpoints#SysLeases} for version 0.8 or above of Vault or {@link LeaseEndpoints#Legacy} for older versions (the default). @since 2.2spring-doc.cn

spring.cloud.vault.config.lifecycle.min-renewalspring-doc.cn

The time period that is at least required before renewing a lease. @since 2.2spring-doc.cn

spring.cloud.vault.config.orderspring-doc.cn

0spring-doc.cn

Used to set a {@link org.springframework.core.env.PropertySource} priority. This is useful to use Vault as an override on other property sources. @see org.springframework.core.PriorityOrderedspring-doc.cn

spring.cloud.vault.connection-timeoutspring-doc.cn

5000spring-doc.cn

Connection timeout.spring-doc.cn

spring.cloud.vault.consul.backendspring-doc.cn

consulspring-doc.cn

Consul backend path.spring-doc.cn

spring.cloud.vault.consul.enabledspring-doc.cn

falsespring-doc.cn

Enable consul backend usage.spring-doc.cn

spring.cloud.vault.consul.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.consul.token-propertyspring-doc.cn

spring.cloud.consul.tokenspring-doc.cn

Target property for the obtained token.spring-doc.cn

spring.cloud.vault.couchbase.backendspring-doc.cn

databasespring-doc.cn

Couchbase backend path.spring-doc.cn

spring.cloud.vault.couchbase.enabledspring-doc.cn

falsespring-doc.cn

Enable couchbase backend usage.spring-doc.cn

spring.cloud.vault.couchbase.password-propertyspring-doc.cn

spring.couchbase.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.couchbase.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.couchbase.static-rolespring-doc.cn

falsespring-doc.cn

Enable static role usage.spring-doc.cn

spring.cloud.vault.couchbase.username-propertyspring-doc.cn

spring.couchbase.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.database.backendspring-doc.cn

databasespring-doc.cn

Database backend path.spring-doc.cn

spring.cloud.vault.database.enabledspring-doc.cn

falsespring-doc.cn

Enable database backend usage.spring-doc.cn

spring.cloud.vault.database.password-propertyspring-doc.cn

spring.datasource.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.database.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.database.static-rolespring-doc.cn

falsespring-doc.cn

Enable static role usage.spring-doc.cn

spring.cloud.vault.database.username-propertyspring-doc.cn

spring.datasource.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.discovery.enabledspring-doc.cn

falsespring-doc.cn

Flag to indicate that Vault server discovery is enabled (vault server URL will be looked up via discovery).spring-doc.cn

spring.cloud.vault.discovery.service-idspring-doc.cn

vaultspring-doc.cn

Service id to locate Vault.spring-doc.cn

spring.cloud.vault.elasticsearch.backendspring-doc.cn

databasespring-doc.cn

Database backend path.spring-doc.cn

spring.cloud.vault.elasticsearch.enabledspring-doc.cn

falsespring-doc.cn

Enable elasticsearch backend usage.spring-doc.cn

spring.cloud.vault.elasticsearch.password-propertyspring-doc.cn

spring.elasticsearch.rest.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.elasticsearch.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.elasticsearch.static-rolespring-doc.cn

falsespring-doc.cn

Enable static role usage.spring-doc.cn

spring.cloud.vault.elasticsearch.username-propertyspring-doc.cn

spring.elasticsearch.rest.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.enabledspring-doc.cn

truespring-doc.cn

Enable Vault config server.spring-doc.cn

spring.cloud.vault.fail-fastspring-doc.cn

falsespring-doc.cn

Fail fast if data cannot be obtained from Vault.spring-doc.cn

spring.cloud.vault.gcp-gce.gcp-pathspring-doc.cn

gcpspring-doc.cn

Mount path of the Kubernetes authentication backend.spring-doc.cn

spring.cloud.vault.gcp-gce.rolespring-doc.cn

Name of the role against which the login is being attempted.spring-doc.cn

spring.cloud.vault.gcp-gce.service-accountspring-doc.cn

Optional service account id. Using the default id if left unconfigured.spring-doc.cn

spring.cloud.vault.gcp-iam.credentials.encoded-keyspring-doc.cn

The base64 encoded contents of an OAuth2 account private key in JSON format.spring-doc.cn

spring.cloud.vault.gcp-iam.credentials.locationspring-doc.cn

Location of the OAuth2 credentials private key. <p> Since this is a Resource, the private key can be in a multitude of locations, such as a local file system, classpath, URL, etc.spring-doc.cn

spring.cloud.vault.gcp-iam.gcp-pathspring-doc.cn

gcpspring-doc.cn

Mount path of the Kubernetes authentication backend.spring-doc.cn

spring.cloud.vault.gcp-iam.jwt-validityspring-doc.cn

15mspring-doc.cn

Validity of the JWT token.spring-doc.cn

spring.cloud.vault.gcp-iam.project-idspring-doc.cn

Overrides the GCP project Id.spring-doc.cn

spring.cloud.vault.gcp-iam.rolespring-doc.cn

Name of the role against which the login is being attempted.spring-doc.cn

spring.cloud.vault.gcp-iam.service-account-idspring-doc.cn

Overrides the GCP service account Id.spring-doc.cn

spring.cloud.vault.hostspring-doc.cn

localhostspring-doc.cn

Vault server host.spring-doc.cn

spring.cloud.vault.kubernetes.kubernetes-pathspring-doc.cn

kubernetesspring-doc.cn

Mount path of the Kubernetes authentication backend.spring-doc.cn

spring.cloud.vault.kubernetes.rolespring-doc.cn

Name of the role against which the login is being attempted.spring-doc.cn

spring.cloud.vault.kubernetes.service-account-token-filespring-doc.cn

/var/run/secrets/kubernetes.io/serviceaccount/tokenspring-doc.cn

Path to the service account token file.spring-doc.cn

spring.cloud.vault.kv.application-namespring-doc.cn

applicationspring-doc.cn

Application name to be used for the context.spring-doc.cn

spring.cloud.vault.kv.backendspring-doc.cn

secretspring-doc.cn

Name of the default backend.spring-doc.cn

spring.cloud.vault.kv.backend-versionspring-doc.cn

2spring-doc.cn

Key-Value backend version. Currently supported versions are: <ul> <li>Version 1 (unversioned key-value backend).</li> <li>Version 2 (versioned key-value backend).</li> </ul>spring-doc.cn

spring.cloud.vault.kv.default-contextspring-doc.cn

applicationspring-doc.cn

Name of the default context.spring-doc.cn

spring.cloud.vault.kv.enabledspring-doc.cn

truespring-doc.cn

Enable the kev-value backend.spring-doc.cn

spring.cloud.vault.kv.profile-separatorspring-doc.cn

/spring-doc.cn

Profile-separator to combine application name and profile.spring-doc.cn

spring.cloud.vault.kv.profilesspring-doc.cn

List of active profiles. @since 3.0spring-doc.cn

spring.cloud.vault.mongodb.backendspring-doc.cn

mongodbspring-doc.cn

MongoDB backend path.spring-doc.cn

spring.cloud.vault.mongodb.enabledspring-doc.cn

falsespring-doc.cn

Enable mongodb backend usage.spring-doc.cn

spring.cloud.vault.mongodb.password-propertyspring-doc.cn

spring.data.mongodb.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.mongodb.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.mongodb.static-rolespring-doc.cn

falsespring-doc.cn

Enable static role usage. @since 2.2spring-doc.cn

spring.cloud.vault.mongodb.username-propertyspring-doc.cn

spring.data.mongodb.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.mysql.backendspring-doc.cn

mysqlspring-doc.cn

mysql backend path.spring-doc.cn

spring.cloud.vault.mysql.enabledspring-doc.cn

falsespring-doc.cn

Enable mysql backend usage.spring-doc.cn

spring.cloud.vault.mysql.password-propertyspring-doc.cn

spring.datasource.passwordspring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.mysql.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.mysql.username-propertyspring-doc.cn

spring.datasource.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.namespacespring-doc.cn

Vault namespace (requires Vault Enterprise).spring-doc.cn

spring.cloud.vault.pcf.instance-certificatespring-doc.cn

Path to the instance certificate (PEM). Defaults to {@code CF_INSTANCE_CERT} env variable.spring-doc.cn

spring.cloud.vault.pcf.instance-keyspring-doc.cn

Path to the instance key (PEM). Defaults to {@code CF_INSTANCE_KEY} env variable.spring-doc.cn

spring.cloud.vault.pcf.pcf-pathspring-doc.cn

pcfspring-doc.cn

Mount path of the Kubernetes authentication backend.spring-doc.cn

spring.cloud.vault.pcf.rolespring-doc.cn

Name of the role against which the login is being attempted.spring-doc.cn

spring.cloud.vault.portspring-doc.cn

8200spring-doc.cn

Vault server port.spring-doc.cn

spring.cloud.vault.postgresql.backendspring-doc.cn

postgresqlspring-doc.cn

postgresql backend path.spring-doc.cn

spring.cloud.vault.postgresql.enabledspring-doc.cn

falsespring-doc.cn

Enable postgresql backend usage.spring-doc.cn

spring.cloud.vault.postgresql.password-propertyspring-doc.cn

spring.datasource.passwordspring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.postgresql.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.postgresql.username-propertyspring-doc.cn

spring.datasource.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.rabbitmq.backendspring-doc.cn

rabbitmqspring-doc.cn

rabbitmq backend path.spring-doc.cn

spring.cloud.vault.rabbitmq.enabledspring-doc.cn

falsespring-doc.cn

Enable rabbitmq backend usage.spring-doc.cn

spring.cloud.vault.rabbitmq.password-propertyspring-doc.cn

spring.rabbitmq.passwordspring-doc.cn

Target property for the obtained password.spring-doc.cn

spring.cloud.vault.rabbitmq.rolespring-doc.cn

Role name for credentials.spring-doc.cn

spring.cloud.vault.rabbitmq.username-propertyspring-doc.cn

spring.rabbitmq.usernamespring-doc.cn

Target property for the obtained username.spring-doc.cn

spring.cloud.vault.read-timeoutspring-doc.cn

15000spring-doc.cn

Read timeout.spring-doc.cn

spring.cloud.vault.schemespring-doc.cn

httpsspring-doc.cn

Protocol scheme. Can be either "http" or "https".spring-doc.cn

spring.cloud.vault.session.lifecycle.enabledspring-doc.cn

truespring-doc.cn

Enable session lifecycle management.spring-doc.cn

spring.cloud.vault.session.lifecycle.expiry-thresholdspring-doc.cn

7sspring-doc.cn

The expiry threshold for a {@link LoginToken}. The threshold represents a minimum TTL duration to consider a login token as valid. Tokens with a shorter TTL are considered expired and are not used anymore. Should be greater than {@code refreshBeforeExpiry} to prevent token expiry.spring-doc.cn

spring.cloud.vault.session.lifecycle.refresh-before-expiryspring-doc.cn

5sspring-doc.cn

The time period that is at least required before renewing the {@link LoginToken}.spring-doc.cn

spring.cloud.vault.ssl.cert-auth-pathspring-doc.cn

certspring-doc.cn

Mount path of the TLS cert authentication backend.spring-doc.cn

spring.cloud.vault.ssl.enabled-cipher-suitesspring-doc.cn

List of enabled SSL/TLS cipher suites. @since 3.0.2spring-doc.cn

spring.cloud.vault.ssl.enabled-protocolsspring-doc.cn

List of enabled SSL/TLS protocol. @since 3.0.2spring-doc.cn

spring.cloud.vault.ssl.key-storespring-doc.cn

Trust store that holds certificates and private keys.spring-doc.cn

spring.cloud.vault.ssl.key-store-passwordspring-doc.cn

Password used to access the key store.spring-doc.cn

spring.cloud.vault.ssl.key-store-typespring-doc.cn

Type of the key store. @since 3.0spring-doc.cn

spring.cloud.vault.ssl.trust-storespring-doc.cn

Trust store that holds SSL certificates.spring-doc.cn

spring.cloud.vault.ssl.trust-store-passwordspring-doc.cn

Password used to access the trust store.spring-doc.cn

spring.cloud.vault.ssl.trust-store-typespring-doc.cn

Type of the trust store. @since 3.0spring-doc.cn

spring.cloud.vault.tokenspring-doc.cn

Static vault token. Required if {@link #authentication} is {@code TOKEN}.spring-doc.cn

spring.cloud.vault.urispring-doc.cn

Vault URI. Can be set with scheme, host and port.spring-doc.cn