Spring Vault - managing secrets at scale
summary
Shows Vault + Spring Vault integrated with Spring Boot, demonstrating dynamic DB creds where Vault creates temporary MySQL users, the actual HTTP API calls and bootstrap properties used, and how leases force rotation and renewal. Shows seal/unseal behavior, token scopes and alternatives (LDAP, GitHub, appID), plus audit logs and HSM option. Command examples and config snippets appear and a running demo proves secrets are issued and revoked rather than only described.
AI-written summary · about
chapters (14)
- 0:00Intro
- 5:00symmetric encryption
- 10:35secure secret storage
- 15:45getting started with Vault
- 26:15App ID
- 28:15Spring Cloud
- 29:50Configuration
- 31:10Circuit breakers
- 32:10Project setup
- 33:15Bootstrap properties
- 34:35Boot actuator endpoint
- 35:30Spring Profile endpoint
- 37:05How it works
- 38:15Spring Vault
related talks
53mSecuring Spring Applications with Hashicorp Vault
47mThe Secret to Handling Dynamic Secrets
29mIntro to secrets management using Vault
51mManage Distributed Configuration and Secrets with Spring Cloud and Vault
40mA Better Way To Manage Secrets
51mIntroduction to Vault
36mManage Distributed Secrets in Applications on Cloud Foundry With Spring Cloud Vault
41mModern Security with Microservices and the Cloud