search

spring-cloud / spring-cloud-vault

Configuration Integration with HashiCorp Vault
http://cloud.spring.io/spring-cloud-vault/
Apache License 2.0
270 stars 151 forks source link

Kubernetes Auth method skip SSL verification #728

Closed RajendranHarman closed 4 weeks ago

RajendranHarman commented 4 weeks ago

In HTTPS scheme without SSL details it is throwing error would like to have property like "spring.cloud.vault.ssl.enabled" true/false. Please share the details if there are any solutions that already exists. Library: spring-cloud-starter-vault-config : 4.1.1 Issue: Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Source: 

#Spring cloud vault
spring.cloud.vault.host=vault.infra
spring.cloud.vault.port=8200
spring.cloud.vault.authentication=KUBERNETES
spring.cloud.vault.kubernetes.role=****
spring.cloud.vault.kubernetes.kubernetes-path=kubernetes
spring.cloud.vault.kubernetes.service-account-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token
spring.cloud.vault.scheme=https
spring.cloud.vault.sssl.skip-verification=true
spring.cloud.vault.kv.enabled=false
spring.cloud.vault.database.enabled=true
spring.cloud.vault.database.role=****-postgres-role

spring.cloud.vault.database.username-property=postgres.username
spring.cloud.vault.database.password-property=postgres.password
spring.config.import=vault://
mp911de commented 4 weeks ago

There's no such flag for Spring Cloud Vault. If you want to bypass SSL checks, you need to configure your own client instances with appropriate TrustManager settings.