Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-22727

(7.4.z) WFLY-14919 - Credential store expression resolution not usable for deployment descriptors and annotations.

    XMLWordPrintable

Details

    Description

      The legacy vault integration caused a VaultPropertyResolver to be registered for deployment descriptor processing, we need an equivalent for Elytron's encrypted expression support.

      Due to the way it was integrated Vault needed to be passed between various resources in constructors so references were available - the expression resolution in Elytron is available as a capability.

      This may mean the EE DUPs can use the capability API to discover it instead. One point to be cautious about is avoiding a direct dependency on the Elytron subsystem as this should be optional.

      This should also include annotation processing:
      https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html/how_to_configure_server_security/securely_storing_credentials#use_an_encrypted_sensitive_string_in_an_application

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. WFLY-14919 Credential store expression resolution not usable for deployment descriptors and annotations.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-22726 (7.4.z) WFCORE-5696 - Credential store expression resolution not usable for deployment descriptors and annotations.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          relates to

          Task - Represents a small unit of work that is not end-user facing. WFLY-14912 Remove Vault support entirely from WildFly

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              bstansbe@redhat.com Brian Stansberry
              darran.lofthouse@redhat.com Darran Lofthouse
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: