spring-vault | Provides familiar Spring abstractions for HashiCorp Vault | Identity Management library

I'm trying to retrieve secrets from vault using the AppRole authentication. But I get the error :

java.lang.IllegalArgumentException: URI is not absolute

What I do is create a vaultEndpoint then depending on the method choosen I use token authentication or AppRole authentication. There's no issue with the token authentication, however whenever I try to retrive a secret or even get the vaultToken to login with AppRole the URI is not absolute error occurs.

I 've seen in https://docs.oracle.com/javase/8/docs/api/java/net/URI.html that an URI is absolute when it specifies a scheme otherwise it is relative. But I think that my URI is specifing a scheme.

So I'm a bit lost here. Does anyone know what I am doing wrong ? Or why I get this error ?

I use spring-vault-core-2.2.0.RELEASE

Here's my code :

I have many spring boot microservices and I have developed a new project that has Spring-Vault as a dependency. This new project (say vault-client-spring) is developed in order to have common configuration for setting up of Vault and use it in all of the microservices and I have published the jar in private maven hosted repository in my organization.

My problem is when I add this jar as dependency in any microservices, the application is not starting throwing the following error. The Spring-Cloud-Vault dependencies are not imported to my consuming projects. I've also added the necessary properties requrired starting with prefix spring.cloud.vault in bootstrap.yml file.

Here's my build.gradle file for vault-client-spring.

For a project we are sending some events to kafka. We use spring-kafka 2.6.2.

Due to usage of spring-vault we have to restart/kill the application before the end of credentials lease (application is automatically restarted by kubernetes). Our problem is that when using applicationContext.close() to proceed with our gracefull shutdown, KafkaProducer gets an InterruptedException Interrupted while joining ioThread inside it's close() method. It means that in our case some pending events are not sent to kafka before shutdown as it's forced to close due to an error during destroy.

Here under a stacktrace

In my Spring Boot project, I defined 4 profiles

1. demo
2. dev
3. test
4. prod

properties in YAML files will be replaced by HashiCorp Vault properties during startup. For this, I use Spring Cloud Vault library. Everything works as expected in Spring Boot 2.3.x

When I try to upgrade the project to Spring Boot 2.4.0 with Spring Cloud Vault 3.0.0-SNAPSHOT version, the properties are not being replaced

bootstrap.yml

I have a project that adopts Spring Vault to fetch credential. Dependencies of the project are as following and build.gradle file is generated automatically afterwards.

When I build the project I got the error

Could not resolve org.springframework.vault:spring-vault-core:2.2.2.RELEASE.

Possible solution:

• Declare repository providing the artifact, see the documentation at https://docs.gradle.org/current/userguide/declaring_repositories.html

I have checked the libraries by going to the Project Structures and got the weird thing

The weird thing I mean here is about the path of the jar file. It should be something like

%GRADLE_HOME%\caches\modules-2\files-2.1\org.springframework.cloud\spring-cloud-vault-config\2.2.3.RELEASE\5fd5a06deb01db77eb3e9b8e723ccc1e0790c420

How can I fix this issue in IntelliJ?

I am trying to read secrets from vault using Spring vault cloud. I use a service token type.

In my set-up the max_ttl is set to 1h and ttl to 10 minutes, so the token will be renewed at every 10 minutes till the max_ttl is reached. Once the max_ttl is reached, the token will be dropped/revoked and a new login is performed, receving a new token.

The issue is that when trying to read secrets, the old expired token is still used.

Any idea why this happens?

Using:

• spring-cloud-config-2.2.3
• spring-vault-core-2.2.0
• Kubernetes

Vault audit logs:

I have configured spring boot application to take properties from my environment but strangely I am facing an error while starting my application. I have added the properties in my ~/.bash_profile and also did source ~/.bash_profile after adding them to the profile.

This is how my bootstrap.properties look like:

I have an application running in Spring Boot, using Spring Vault to retrieve passwords. It is using KubernetesAuthentication to log in. This worked well until I upgraded to Spring Boot 2.2.5. I then started to get SSLPeerUnverifiedException.