hashicorp vault - Spring Boot with VaultProject.io Token

Question

I am trying to learn how to integrate secret manager like vaultproject.io with my spring boot application so that I can store and access my db passwords that are currently stored in application.properties... ( very not safe )

However, i dont understand when i read the sample code that the access token to the vault itself is left exposed in application.properties:

spring.cloud.vault.token=00000000-0000-0000-0000-000000000000
spring.cloud.vault.scheme=http

if application.properties are not safe, then what is the point if you leave the token in there? Can't hacker just steal those to connect to the vault?

Answer 1

等待大神答复