search

spring-cloud / spring-cloud-vault

Configuration Integration with HashiCorp Vault
http://cloud.spring.io/spring-cloud-vault/
Apache License 2.0
275 stars 152 forks source link

Support for static-role with password rotation in Vault 1.2 #594

Closed nicolas2lee closed 2 years ago

nicolas2lee commented 3 years ago

I find no way to rotate password with static role (with a static username, but the password should be rotated) based in current documentation or examples as dynamic creds. Is it possible to rotate static role password as dynamic creds ?

mp911de commented 3 years ago

This ticket somewhat duplicates https://github.com/spring-projects/spring-vault/issues/645.

mp911de commented 2 years ago

Revisiting this one, static roles are an approach to serve compliance issues and not so much an approach where each application instance receives its own login that can be destroyed if there was a disclosure of credentials or someone compromised the system.

That being said, we do not plan to implement this feature as there are already solutions in place that address the need for dynamic database secrets.