Class VaultClient

java.lang.Object

com.scivicslab.actoriac.VaultClient

public class VaultClient
extends Object

Client for HashiCorp Vault API communication. Supports reading secrets from Vault KV v2 engine.

Author:

devteam@scivics-lab.com

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	VaultClient.VaultException	Exception thrown when Vault operations fail.

Field Summary

Fields

Modifier and Type	Field	Description
private final VaultConfig	config
private final HttpClient	httpClient

Constructor Summary

Constructors

Constructor	Description
VaultClient(VaultConfig config)	Creates a new VaultClient with the given configuration.

Method Summary

Modifier and Type	Method	Description
private String	extractSecretValue(String jsonResponse)	Extracts the secret value from Vault API response.
String	readSecret(String path)	Reads a secret from Vault.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

config

private final VaultConfig config

httpClient

private final HttpClient httpClient

Constructor Details

VaultClient

public VaultClient(VaultConfig config)

Creates a new VaultClient with the given configuration.

Parameters:

config - Vault configuration

Method Details

readSecret

public String readSecret(String path)
                  throws VaultClient.VaultException

Reads a secret from Vault.

Parameters:

path - Secret path (e.g., "secret/data/ssh/iacuser/private_key")

Returns:

Secret value as String

Throws:

VaultClient.VaultException - if Vault communication fails or secret not found

extractSecretValue

private String extractSecretValue(String jsonResponse)
                           throws VaultClient.VaultException

Extracts the secret value from Vault API response. For KV v2 engine, the response structure is: { "data": { "data": { "value": "actual-secret-value" } } }

Parameters:

jsonResponse - JSON response from Vault

Returns:

Secret value

Throws:

VaultClient.VaultException - if response format is invalid