Storing Confluence DB password in Hashicorp Vault

Matt Parks

I am following the documentation in the listed link in order to try to set up Confluence to use a secret stored in Hashicorp Vault to make the connection to the DB (instead of storing it in clear text in the confluence.cfg.xml file).

https://confluence.atlassian.com/doc/configure-confluence-with-hashicorp-vault-1331233083.html

I'm not completely sure how to update the xml file based on the instructions in the following step:

 

In the <span>confluence.cfg.xml</span> file, add or modify the jdbc.password.decrypter.classname property to contain: com.atlassian.secrets.store.vault.VaultSecretStore

 

I tried adding in the following line in the xml file

<property name="jdbc.password.decrypter.classname>com.astlassian.secrets.store.vault.VaultSecretStore</property>

, but, on startup, I get the following message when I try to navigate to my Confluence instance in a browser:

 

ClassNotFoundException: com.atlassian.secrets.store.vault.VaultSecretStore

 

Where would I import the VaultSecretStore class into my Confluence instance?

 

Matt Parks

Looking closer at the documentation, it appears that it isn't possible to use Hashicorp Vault until 8.7, so I will upgrade, at which point I assume that the necessary libraries will be automatically installed.