How to use encrypt Cassandra password credentials in config in Quarkus?

user_5059734 0
Viewed 171

Problem Statement

The requirement is to set encrypted password in configuration for Cassandra so that Quarkus automatically decrypts the password at runtime (like jasypt).

Example

quarkus.cassandra.auth.username=john
quarkus.cassandra.auth.password=s3cr3t  --> instead of this
quarkus.cassandra.auth.password=ENC(1k9u)  --> something like this
datastax quarkus cassandra
2 Answers

The recommendation is to use Vault as a ConfigSource. Secrets can be stored on Vault and Quarkus will read them as any other configuration source.

Please check: https://quarkus.io/guides/vault

user_17579190

I've reached out to the team who maintain the Quarkus extension for Apache Cassandra and got confirmation that unfortunately it's not possible to do that. Cheers!

user_42695350
Related