com.bettercloud.vault

Class Vault

java.lang.Object

com.bettercloud.vault.Vault

public class Vault
extends java.lang.Object

The Vault driver class, the primary interface through which dependent applications will access Vault.

This driver exposes a DSL, compartmentalizing the various endpoints of the HTTP API (e.g. "/", "sys/init", "sys/seal") into separate implementation classes (e.g. Logical, Init, etc).

Example usage:

 final VaultConfig config = new VaultConfig("http://127.0.0.1:8200", "eace6676-4d78-c687-4e54-03cad00e3abf");
 final Vault vault = new Vault(config);

 ...

 final Map<String, String> secrets = new HashMap<String, String>();
 secrets.put("value", "world");
 secrets.put("other_value", "You can store multiple name/value pairs under a given key");

 final LogicalResponse writeResponse = vault
                                         .withRetries(5, 1000)  // optional
                                         .logical()
                                         .write("secret/hello", secrets);

 ...

 final String value = vault.logical()
                        .read("secret/hello")
                        .getData().get("value");
 

Constructor Summary

Constructors

Constructor and Description
Vault(VaultConfig vaultConfig) Construct a Vault driver instance with the provided config settings.

Method Summary

Modifier and Type	Method and Description
Auth	auth() Returns the implementing class for operations on Vault's /v1/auth/* REST endpoints
Debug	debug() Returns the implementing class for Vault's debug operations (e.g.
Leases	leases() Returns the implementing class for Vault's lease operations (e.g.
Logical	logical() Returns the implementing class for Vault's core/logical operations (e.g.
Pki	pki() Returns the implementing class for Vault's PKI secret backend (i.e.
Pki	pki(java.lang.String mountPath) Returns the implementing class for Vault's PKI secret backend, using a custom path when that backend is mounted on something other than the default (i.e.
Vault	withRetries(int maxRetries, int retryIntervalMilliseconds) This method is chained ahead of endpoints (e.g.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Vault

public Vault(VaultConfig vaultConfig)

Construct a Vault driver instance with the provided config settings.

Parameters:

vaultConfig - Configuration settings for Vault interaction (e.g. server address, token, etc)

Method Detail

withRetries

public Vault withRetries(int maxRetries,
                         int retryIntervalMilliseconds)

This method is chained ahead of endpoints (e.g. logical(), auth(), etc... to specify retry rules for any API operations invoked on that endpoint.

Parameters:

maxRetries - The number of times that API operations will be retried when a failure occurs

retryIntervalMilliseconds - The number of milliseconds that the driver will wait in between retries

Returns:

This object, with maxRetries and retryIntervalMilliseconds populated

logical

public Logical logical()

Returns the implementing class for Vault's core/logical operations (e.g. read, write).

Returns:

The implementing class for Vault's core/logical operations (e.g. read, write)

auth

public Auth auth()

Returns the implementing class for operations on Vault's /v1/auth/* REST endpoints

Returns:

The implementing class for Vault's auth operations.

pki

public Pki pki()

Returns the implementing class for Vault's PKI secret backend (i.e. /v1/pki/* REST endpoints).

Returns:

The implementing class for Vault's PKI secret backend.

pki

public Pki pki(java.lang.String mountPath)

Returns the implementing class for Vault's PKI secret backend, using a custom path when that backend is mounted on something other than the default (i.e. /v1/pki).

For instance, if your PKI backend is instead mounted on /v1/root-ca, then "root-ca" would be passed via the mountPath parameter. Example usage:

 final VaultConfig config = new VaultConfig(address, token);
 final Vault vault = new Vault(config);
 final PkiResponse response = vault.pki("root-ca").createOrUpdateRole("testRole");

 assertEquals(204, response.getRestResponse().getStatus());
 

Parameters:

mountPath - The path on which your Vault PKI backend is mounted, without the /v1/ prefix

Returns:

The implementing class for Vault's PKI secret backend.

leases

public Leases leases()

Returns the implementing class for Vault's lease operations (e.g. revoke, revoke-prefix).

Returns:

The implementing class for Vault's lease operations (e.g. revoke, revoke-prefix).

debug

public Debug debug()

Returns the implementing class for Vault's debug operations (e.g. raw, health).

Returns:

The implementing class for Vault's debug operations (e.g. raw, health)