Want more control over your database deployments? – Find out how with Carlos Robles at Redgate Summit Register now

Flyway Documentation

Vault Secrets

Flyway Teams

Description

A comma-separated list of paths to key-value secrets in Vault that contain Flyway configurations. This must start with the name of the engine and end with the name of the secret.

The resulting form is {engine_name}/data/{path}/{to}/{secret_name} for the key-value V2 engine, and {engine_name}/{path}/{to}/{secret_name} for the key-value V1 engine. If multiple secrets specify the same configuration parameter, then the last secret takes precedence.

Example: kv/data/flyway/flywayConfig

Usage

Commandline

./flyway -vaultSecrets="kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2" info

Configuration File

flyway.vault.secrets=kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2

Environment Variable

FLYWAY_VAULT_SECRETS=kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2

API

Flyway.configure()
    .vaultSecrets("kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2")
    .load()

Gradle

flyway {
    vaultSecrets = 'kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2'
}

Maven

<configuration>
    <vaultSecrets>kv/data/flyway/flywayConfig1,kv/flyway/flywayConfig2</vaultSecrets>
</configuration>