This feature will add the ability to replace property value with the value from Vault KV secret.

It works similarly to how {cipher} works (https://cloud.spring.io/spring-cloud-config/reference/html/#_encryption_and_decryption).

For example, if activated vault profile and application.yml contains some keys with {vault} prefix:

spring:
  datasource:
    username: dbuser
    password: '{vault}:dbs/myapp#pass'

Spring Cloud Config server on the server-side will request the Vault server will load secret with the path dbs/myapp and retrieve the value from pass key and will put it in spring.datasource.password property.

Same as {cipher}, if a value cannot be parsed, it is removed from the property source and an additional property is added with the same key but prefixed with invalid and a value that means “not applicable” (usually <n/a>).