Package com.scivicslab.turingworkflow.plugins.vault

Class KubectlVaultBackend

java.lang.Object

com.scivicslab.turingworkflow.plugins.vault.KubectlVaultBackend

All Implemented Interfaces:

VaultBackend

public class KubectlVaultBackend
extends Object
implements VaultBackend

VaultBackend that reads secrets via kubectl exec into a Vault pod. Used when Vault is ClusterIP-only inside a k8s cluster.

Constructor Summary

Constructors

Constructor	Description
KubectlVaultBackend(String namespace, String pod)

Method Summary

Modifier and Type	Method	Description
String	get(String path, String fieldName)	Reads a named field from a Vault KV v2 secret.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

KubectlVaultBackend

public KubectlVaultBackend(String namespace,
 String pod)

Method Details

get

public String get(String path,
 String fieldName)
           throws VaultException

Description copied from interface: VaultBackend

Reads a named field from a Vault KV v2 secret.

Specified by:

get in interface VaultBackend

Parameters:

path - KV path in CLI notation (e.g., "keycloak-local-llm/test-users")

fieldName - name of the field inside the secret's data map

Returns:

field value as String

Throws:

VaultException - if the secret cannot be read or the field is absent