Package org.frankframework.credentialprovider

Class AnsibleVaultCredentialFactory

java.lang.Object
org.frankframework.credentialprovider.AbstractMapCredentialFactory
org.frankframework.credentialprovider.AnsibleVaultCredentialFactory
All Implemented Interfaces:
ICredentialFactory
public class AnsibleVaultCredentialFactory extends AbstractMapCredentialFactory

CredentialFactory implementation that uses an Ansible Vault to read secrets from.

Ansible Vault is a feature of Ansible that allows you to securely store and manage sensitive data, such as passwords, API keys, or other secrets, in encrypted files. It is particularly useful for protecting sensitive information in automation scripts or configuration files.

To set up Ansible Vault in the Framework, you need to set the following properties in credentialproperties.properties:


 credentialFactory.class=org.frankframework.credentialprovider.AnsibleVaultCredentialFactory
 credentialFactory.ansibleVault.vaultFile=catalina-secure-store.vault
 credentialFactory.ansibleVault.keyFile=.secure-vault-keyfile

Note that the default values for the vault file and key file are catalina-secure-store.vault and .secure-vault-keyfile respectively.

Note that the vault file and key file are read from the classpath. If you want to use a different location, you can specify the full path to the file.

See Also: