configuration-filesquarkus

How to read encrypted values from Quarkus config properties?


I'm setting up my Quarkus app to run in the cloud, but I couldn't find how to handle encrypted properties in the configuration file.

In my Spring Boot apps I know that I can prefix a property with some tags so it'll be decrypted before usage:

password={cipher}{key:alias}<encrypted-text>

Is there any Quarkus AWS plugin that handles such syntax?

Or any way that I can access the configuration properties before usage so I decrypt them manually?


Solution

  • This is not supported in Quarkus. There are some prototype to support something similar in the future but they are not complete yet. Please follow: https://github.com/quarkusio/quarkus/issues/7442

    The recommendation is to Vault: https://quarkus.io/guides/vault

    If you want to access configuration before usage, you can implement an interceptor: https://smallrye.io/smallrye-config/Main/extensions/interceptors/