managed_credentials_providers.properties
(在程序运行目录下)初始化阿里云凭据管家动态RAM凭据客户端:
cache_client_dkms_config_info=[{"regionId":"<your dkms region>","endpoint":"<your dkms endpoint>","passwordFromFilePath":"< your password file path >","clientKeyFile":"<your client key file path>","ignoreSslCerts":false,"caFilePath":"<your CA certificate file path>"}]
cache_client_dkms_config_info配置项说明:
1. cache_client_dkms_config_info配置项为json数组,支持配置多个region实例
2. regionId:地域Id
3. endpoint:专属kms的域名地址
4. passwordFromFilePath和passwordFromEnvVariable
passwordFromFilePath:client key密码配置从文件中获取,与passwordFromEnvVariable二选一
例:当配置passwordFromFilePath:<你的client key密码文件所在的路径>,需在配置的路径下配置写有password的文件
passwordFromEnvVariable:client key密码配置从环境变量中获取,与passwordFromFilePath二选一
例:当配置"passwordFromEnvVariable":"your_password_env_variable"时,
需在环境变量中添加your_password_env_variable=<你的client key对应的密码>
5. clientKeyFile:client key json文件的路径
6. ignoreSslCerts:是否忽略ssl证书 (true:忽略ssl证书,false:验证ssl证书)
7. caFilePath:专属kms的CA证书路径