RabbitMQ Secrets Engine (API)
This is the API documentation for the Vault RabbitMQ secrets engine. For general information about the usage and operation of the RabbitMQ secrets engine, please see the RabbitMQ documentation.
This documentation assumes the RabbitMQ secrets engine is enabled at the
/rabbitmq
path in Vault. Since it is possible to enable secrets engines at any
location, please update your API calls accordingly.
Configure Connection
This endpoint configures the connection string used to communicate with RabbitMQ.
Method | Path |
---|---|
POST | /rabbitmq/config/connection |
Parameters
connection_uri
(string: <required>)
– Specifies the RabbitMQ connection URI.username
(string: <required>)
– Specifies the RabbitMQ management administrator username.password
(string: <required>)
– Specifies the RabbitMQ management administrator password.verify_connection
(bool: true)
– Specifies whether to verify connection URI, username, and password.password_policy
(string: "")
- Specifies a password policy to use when creating dynamic credentials. Defaults to generating an alphanumeric password if not set.username_template
(string)
- Template describing how dynamic usernames are generated.
Sample Payload
Sample Request
Configure Lease
This endpoint configures the lease settings for generated credentials.
Method | Path |
---|---|
POST | /rabbitmq/config/lease |
Parameters
ttl
(int: 0)
– Specifies the lease ttl provided in seconds.max_ttl
(int: 0)
– Specifies the maximum ttl provided in seconds.
Sample Payload
Sample Request
Create Role
This endpoint creates or updates the role definition.
Method | Path |
---|---|
POST | /rabbitmq/roles/:name |
Parameters
name
(string: <required>)
– Specifies the name of the role to create. This is specified as part of the URL.tags
(string: "")
– Specifies a comma-separated RabbitMQ management tags.vhosts
(string: "")
– Specifies a map of virtual hosts to permissions.vhost_topics
(string: "")
– Specifies a map of virtual hosts and exchanges to topic permissions. This option requires RabbitMQ 3.7.0 or later.
Sample Payload
Sample Request
Read Role
This endpoint queries the role definition.
Method | Path |
---|---|
GET | /rabbitmq/roles/:name |
Parameters
name
(string: <required>)
– Specifies the name of the role to read. This is specified as part of the URL.
Sample Request
Sample Response
Delete Role
This endpoint deletes the role definition.
Method | Path |
---|---|
DELETE | /rabbitmq/roles/:name |
Parameters
name
(string: <required>)
– Specifies the name of the role to delete. This is specified as part of the URL.
Sample Request
Generate Credentials
This endpoint generates a new set of dynamic credentials based on the named role.
Method | Path |
---|---|
GET | /rabbitmq/creds/:name |
Parameters
name
(string: <required>)
– Specifies the name of the role to create credentials against. This is specified as part of the URL.
Sample Request
Sample Response