Keycloak and Spring Cloud Vault Integration
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Domain
- authentication, backend, cloud
Research direction
Start by reviewing the existing Spring Cloud Vault authentication methods and the repository's integration points for adding another authentication provider. Compare the requested Keycloak/OIDC flow with the currently supported methods; done would mean a decided implementation or documented support path, with appropriate tests if the project scope is accepted.
Written by the indexing model from the issue text.
Description
I want to manage my secrets using Spring Cloud Vault. However, the authentication methods in Spring Cloud Vault do not fit my needs(I don't want a static token due to security requirements, and I am not able to use Kubernetes or AWS methods).
I am currently using Keycloak in my app. I was able to integrate Keycloak and Vault independently of my application, and I can connect to the vault with "Sign in with OIDC provider" by using the dynamic tokens produced by Keycloak. However, Spring Cloud Vault does not have a direct authentication method with Keycloak. Do you know how I can use Keycloak or its generated dynamic token as an authentication method on my app(somehow using Approle or any other methods that Spring currently has)? Or does Spring have a plan to use OIDC providers as an authentication method for the Spring Cloud Vault as well in the future?
- Dominant language
- Java
- Stars
- 291
- Forks
- 152
- Avg merge
- 7h 10m
- Merged PRs (30d)
- 23
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from spring-cloud/spring-cloud-vault
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
spring-cloud/spring-cloud-vault#952 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
spring-cloud/spring-cloud-vault#958 · 2 comments ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
spring-cloud/spring-cloud-vault#953 ·
Maintainers usually reply within 1 day
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
spring-cloud/spring-cloud-vault#942 ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
spring-cloud/spring-cloud-vault#940 · 1 reaction ·
Maintainers usually reply within 1 day
All issues in spring-cloud/spring-cloud-vault
Similar issues
-
[BUG] Re-subscribing the Mono returned by listTools/listResources/listResourceTemplates/listPrompts/listRoots duplicates the resultsPossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
modelcontextprotocol/java-sdk#1174 · 1 reaction ·
Maintainers usually reply within 2 days
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
refinedmods/refinedstorage2#1419 ·
-
module: core
Difficulty 2/5 1-3 hours Newbie friendliness 77/100
bigbluebutton/bigbluebutton#26028 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
MetricsHub/metricshub-community#1390 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
apache/rocketmq-dashboard#6331 ·
Maintainers usually reply within 5 days