{"id":22344189,"url":"https://github.com/premium-minds/dbeaver-vault","last_synced_at":"2025-06-20T23:36:45.299Z","repository":{"id":71523348,"uuid":"454007948","full_name":"premium-minds/dbeaver-vault","owner":"premium-minds","description":"Dbeaver integration with Vault ","archived":false,"fork":false,"pushed_at":"2025-05-20T16:04:01.000Z","size":333,"stargazers_count":12,"open_issues_count":2,"forks_count":0,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-06-14T03:05:12.134Z","etag":null,"topics":["dbeaver","vault"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/premium-minds.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-01-31T13:00:41.000Z","updated_at":"2025-05-21T01:33:23.000Z","dependencies_parsed_at":null,"dependency_job_id":"6a3427a0-832d-4b80-85fa-92ebd222282a","html_url":"https://github.com/premium-minds/dbeaver-vault","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/premium-minds/dbeaver-vault","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/premium-minds%2Fdbeaver-vault","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/premium-minds%2Fdbeaver-vault/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/premium-minds%2Fdbeaver-vault/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/premium-minds%2Fdbeaver-vault/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/premium-minds","download_url":"https://codeload.github.com/premium-minds/dbeaver-vault/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/premium-minds%2Fdbeaver-vault/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":261037153,"owners_count":23100933,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dbeaver","vault"],"created_at":"2024-12-04T09:08:52.204Z","updated_at":"2025-06-20T23:36:40.288Z","avatar_url":"https://github.com/premium-minds.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# DBeaver Vault plugin\n\nProvides database credentials using [Vault dynamic secrets](https://www.vaultproject.io/docs/secrets/databases).\n\nVault login is not handled by this plugin.\n\nYou should manually log in into Vault, which will, using the default [Token Helper](https://www.vaultproject.io/docs/commands/token-helper), create a Vault token file in `$HOME/.vault-token`. Check another [Vault Token Helper](https://github.com/joemiller/vault-token-helper) with support for native secret storage on macOS, Linux, and Windows.\n\nThe recommended way to use this plugin is with a [Vault Agent](https://www.vaultproject.io/docs/agent), with [Auto-Auth](https://www.vaultproject.io/docs/agent/autoauth) and [cache](https://www.vaultproject.io/docs/agent/caching) enabled.\n\n## Installation With Update Site URL\n\n * Click Help → Install New Software... then enter this url:\n \n    `https://raw.githubusercontent.com/premium-minds/dbeaver-vault/master/update-site/`\n * Make sure _DBeaver Vault_ is checked, then click Next to install the plugin.\n * See [Optional extensions](https://github.com/dbeaver/dbeaver/wiki/Optional-extensions) if you have any problems installing the plugin\n\n## Install from Marketplace\n\n * [DBeaver Vault](https://marketplace.eclipse.org/content/dbeaver-vault)\n\n[![Drag to your running Eclipse* workspace. *Requires Eclipse Marketplace Client](https://marketplace.eclipse.org/sites/all/themes/solstice/public/images/marketplace/btn-install.svg)](http://marketplace.eclipse.org/marketplace-client-intro?mpc_install=5497069 \"Drag to your running Eclipse* workspace. *Requires Eclipse Marketplace Client\")\n\n## Screenshots\n\n![dbeaver-vault.png](./screenshots/dbeaver-vault.png)\n\n## Vault Agent\n\nThis plugin will request new credentials everytime a connection is open to the database. To re-use already existing and valid credentials a Vault Agent is recommended.   \n\nThis is an example, with [AWS Authenticaton](https://www.vaultproject.io/docs/auth/aws). Save it as `vault-agent-dbeaver.hcl` and edit accordingly:\n```hcl\nauto_auth {\n    method \"aws\" {\n        config = {\n            type = \"iam\"\n            role = \"zzz\"\n            access_key = \"xxx\"\n            secret_key = \"yyy\"\n            header_value = \"https://vault.example.com\"\n        }  \n    }\n\n    sink \"file\" {\n        config = {\n            path = \"/opt/vault/vault-token-dbeaver\"\n        }\n    }\n}\n\nvault {\n    address = \"https://vault.example.com\"\n}\n\ncache {  \n    use_auto_auth_token = true\n}\n\nlistener \"tcp\" {\n    address = \"127.0.0.1:8101\"\n    tls_disable = true\n}\n```\n\nLaunch the Vault Agent with `vault agent -log-level=debug -config vault-agent-dbeaver.hcl`. \n\nConfigure a DBeaver database connection with:\n * `Address: 127.0.0.1:8101`\n * `Token file: /opt/vault/vault-token-dbeaver`\n\n### Launching Vault Agent automatically\n\nTo skip launching the Vault Agent manually, you can configure your system manager to launch it on startup. For `systemd` create a `~/.config/systemd/user/vault-agent-dbeaver.service` with:\n```desktop\n[Unit]\nDescription=\"Vault Agent to serve Tokens - DBeaver\"\n\n[Service]\nSyslogIdentifier=vault-agent-dbeaver\nExecStart=/usr/bin/vault agent -config=/opt/vault-agent-dbeaver.hcl\nRestart=always\n\n[Install]\nWantedBy=default.target\n```\n\nEnable the Vault system unit with `systemctl --user enable vault-agent-dbeaver` and launch the Vault Agent with `systemctl --user start vault-agent-dbeaver`.\n\n\n## Limitations\n\nSupport for parsing Vault config file from environment variable `VAULT_CONFIG_PATH` or default `~/.vault` is restricted to [JSON syntax](https://github.com/hashicorp/hcl/blob/main/json/spec.md) only. It does not support [native HCL syntax](https://github.com/hashicorp/hcl/blob/main/hclsyntax/spec.md). \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpremium-minds%2Fdbeaver-vault","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpremium-minds%2Fdbeaver-vault","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpremium-minds%2Fdbeaver-vault/lists"}