MongoDB with dynamic credentials

[wiebeck]

Hi everyone,

for JDBC we're currently using dynamic database credentials via Hashicorp Vault which is working quite well (besides some occasional access denied errors). Now we kind of need the same for MongoDB.

I'm a bit surprised that there don't seem to be any ways to specify credentials other than via application.properties or other config sources but in the end these are always "static" credentials that do not expire. We could also use a sidecar container that periodically performs the actual Vault database/creds request to generate fresh credentials and write them to e.g. a file but what then? How do we load these credentials from this file on Quarkus startup - and every time the MongoDB client creates a new connection?

Adding the ability to use CredentialsProvider as requested in #20277 would be a good start. Any plans on that on the horizon?

And why aren't there more people requesting this feature?

[quarkus-bot[bot]]

/cc @evanchooly, @loicmathieu