This sample shows how to use Spring Cloud Config Azure KeyVault Starter.
- See the Microsoft Getting Started Guide for Azure Key Vault Secrets how to setup a KeyVault.
- Prepare KeyVault One
- Add a secret with name
test-key-to-decrypt-one
anddecrypted-value-of-keyvault-one
- Add a secret with name
application---default---master---simplekey
and valuedummy
- Add a secret with name
- Prepare KeyVault Two
- Add a secret with name
application---default---master---spring--datasource--password
and valuetest123
- Add a secret with name
Open application.properties
file and add below properties to specify your Azure KeyVault url, Azure service principal client id and client key.
# KeyVault One
spring.cloud.config.server.composite[1].uri=put-your-azure-keyvault-url-here
spring.cloud.config.server.composite[1].client-id=put-your-azure-client-id-here
spring.cloud.config.server.composite[1].client-key=put-your-azure-client-key-here
spring.cloud.config.server.composite[1].tenant-id=put-your-azure-tenant-id-here
# KeyVault two
spring.cloud.config.server.composite[2].uri=put-your-azure-keyvault-url-here
spring.cloud.config.server.composite[2].client-id=put-your-azure-client-id-here
spring.cloud.config.server.composite[2].client-key=put-your-azure-client-key-here
spring.cloud.config.server.composite[2].tenant-id=put-your-azure-tenant-id-here
Open http://localhost:8888/test-application/default/master
in your favorite browser. You should see something like this:
{
"name": "test-application",
"profiles": [
"default"
],
"label": "master",
"version": null,
"state": null,
"propertySources": [
{
"name": "classpath:/config-data/application.properties",
"source": {
"client.test.key": "test-value",
"client.test.encrypted.one": "decrypted-value-of-keyvault-one"
}
},
{
"name": "keyvault-application-default",
"source": {
"simplekey": "dummy"
}
},
{
"name": "keyvault-application-default",
"source": {
"spring.datasource.password": "test123"
}
}
]
}