IDEA中Spring Cloud Vault配置无法覆盖启动报错求助

问题现象 #

Spring Boot应用在PCF环境运行时，application.properties中的Vault配置正常生效。本地开发时创建了application-local.properties用于token认证，且在IDEA运行/调试配置中设置了Active Profiles为local，但启动时仍报错，提示${VAULT_ADDR}未被替换，说明local环境的Vault配置未被加载。

报错信息 #

23:32:40.289 [main] ERROR org.springframework.boot.SpringApplication - Application run failed
java.lang.IllegalArgumentException: Illegal character in path at index 1: ${VAULT_ADDR}
    at java.base/java.net.URI.create(URI.java:906)
    at org.springframework.cloud.vault.config.VaultConfiguration.createVaultEndpoint(VaultConfiguration.java:121)
    at org.springframework.cloud.vault.config.VaultConfigDataLoader$ImperativeInfrastructure.<init>(VaultConfigDataLoader.java:445)
    at org.springframework.cloud.vault.config.VaultConfigDataLoader.registerImperativeInfrastructure(VaultConfigDataLoader.java:177)

配置文件参考 #

application.properties #

spring.application.name=myvaultapp
spring.main.allow-bean-definition-overriding=true
spring.main.web-application-type= reactive
spring.main.lazy-initialization= false
spring.profiles.group.dev=cloud
spring.profiles.group.qa=cloud
spring.profiles.group.uat=cloud
spring.profiles.group.prod=cloud
spring.config.import=optional:vault://
spring.cloud.vault.enabled=true
spring.cloud.vault.reactive.enabled=true
spring.cloud.vault.authentication= PCF
spring.cloud.vault.uri= ${VAULT_ADDR}
spring.cloud.vault.namespace= ${VAULT_NAMESPACE}
spring.cloud.vault.pcf.role= ${VAULT_CF_ROLE}
spring.cloud.vault.pcf.pcf-path= ${VAULT_CF_PATH}
spring.cloud.vault.kv.enabled= true
spring.cloud.vault.kv.backend= kv
spring.cloud.vault.kv.default-context=${spring.application.name}

application-local.properties #

spring.application.name=myvaultapp
spring.main.allow-bean-definition-overriding=true
spring.main.web-application-type= reactive
spring.main.lazy-initialization= false
spring.profiles.group.dev=cloud
spring.profiles.group.qa=cloud
spring.profiles.group.uat=cloud
spring.profiles.group.prod=cloud
spring.config.import=optional:vault://
spring.cloud.vault.enabled=true
spring.cloud.vault.reactive.enabled=true
spring.cloud.vault.authentication= token
spring.cloud.vault.token='Xxxxxxxxx'
spring.cloud.vault.uri= 'https://vault.myvault.org:8200'
spring.cloud.vault.namespace= 'apps'
spring.cloud.vault.scheme=https
spring.cloud.vault.kv.enabled= true
spring.cloud.vault.kv.backend= kv
spring.cloud.vault.kv.default-context=${spring.application.name}
spring.cloud.vault.kv.profiles=dev

解决方案 #

1. 移除配置值的单引号 #

Spring Boot的.properties文件中，字符串类型的配置值不需要加单引号，添加后单引号会被解析为值的一部分，导致Vault客户端无法正确识别URI、token等参数。修改application-local.properties中的相关配置：

spring.cloud.vault.token=Xxxxxxxxx
spring.cloud.vault.uri=https://vault.myvault.org:8200
spring.cloud.vault.namespace=apps

2. 确认local Profile确实生效 #

• 检查IDEA运行/调试配置的Active Profiles字段是否准确填写为local，注意不要有多余空格
• 若IDEA配置未生效，直接在启动参数中添加--spring.profiles.active=local，或在VM选项中添加-Dspring.profiles.active=local强制激活local环境
• 启动应用后查看日志，确认是否输出The following profiles are active: local，验证profile激活状态

3. 核对配置键一致性 #

确保application-local.properties中的Vault配置键与application.properties完全一致，比如spring.cloud.vault.uri、spring.cloud.vault.authentication等，避免因键名拼写错误导致无法覆盖主配置。

4. 调整Vault配置导入时机（可选） #

若存在Vault配置加载过早的问题（在profile激活前就读取了主配置的Vault参数），可在主配置中对spring.config.import做条件化处理：

spring.config.import=optional:vault://
spring.config.import[0]=${spring.profiles.active:cloud}://vault

或在application-local.properties中明确覆盖所有必要的Vault配置项，确保优先级高于主配置。

内容的提问来源于stack exchange，提问作者RKodakandla