External secret vault support [PAXJDBC-112]

[grgrzybek]

József Börcsök created PAXJDBC-112

Next Docker version (1.13, scheduled to 2016-12-08) has support for secrets handled as file resources under /run/secrets: moby/moby#27794

Support external secrets in PAX-JDBC configuration files similar to encryption. Content of password files should be either plain text or encrypted text (compatible with current configuration file values).

Example:

password=FILE(/run/secrets/my-datasource-password)

Content of /run/secrets/my-datasource-password (inside the container) is one of:

testpassword

ENC(IUy6ec2ZA//WL4F9W9zWBuiJCGMWdwyT)

External configurations are loaded first (resolving FILE(...) references) and Decryptor is cascaded to the result.

---

Affects: 0.9.0
Fixed in: 1.0.0
Votes: 0, Watches: 1