Vault server: hashicorp/vault:2.2.1 spring.config.import = vault:// (default context: secret/${spring.application.name} = secret/secrets-demo) bound: DbProperties[url=null, username=app, password=] property sources that hold db.password (first one wins): configurationProperties secret/secrets-demo