What is the Liquibase HashiCorp Vault extension?

Token authentication

Token authentication is the recommended way to connect Liquibase to HashiCorp Vault.

Vault usage without namespace using token authentication:

# Enable Liquibase Secure functionality liquibase.licenseKey= hashicorp,secret/data/liquibase/license,lbsecure_key # Properties to store in the vault url= hashicorp,secret/data/liquibase/urlLocation,url username= hashicorp,secret/data/liquibase/usernameLocation,username password= hashicorp,secret/data/liquibase/passwordLocation,password # Authentication vault.addr= https://vault.example.com:8200 vault.token=vaultTokenExample

JSON web token (JWT) authentication

If you need to use JWT authentication, please email support@liquibase.com for configuration assistance.

Vault usage with namespace using JWT authentication:

Note: liquibase.licenseKey= OR liquibase.licenseKey: are valid ways to indicate the values in the liquibase.properties file.

# Properties to store in the vault liquibase.licenseKey= hashicorp,secret/data/liquibase/license,lbsecure_key url= hashicorp,secret/data/liquibase/urlLocation,url username= hashicorp,secret/data/liquibase/usernameLocation,username password= hashicorp,secret/data/liquibase/passwordLocation,password # Authentication vault.addr=https://vault.example.com:8200 vault.jwt=your-jwt-token vault.namespace=your-vault-namespace vault.role=your-vault-role

Command Line Attributes