smallrye-config-crypto: no decrypt ?

[nicolasduminil]

Hello,

The Quarkus documentation (https://quarkus.io/guides/config-secrets) shows how to use secrets with Quarkus CLI on the behalf of the quarkus config set --encrypt ... command. But I didn't find any quarkus config option to decrypt an encrypted value. The only supported options seems to be set and remove. So, I tried quarkus config set --decrypt ... but it just clears the value of the associated property.

So, how is one supposed to decrypt Quarkus secret using the CLI ? Or jq ?

Many thanks in advance.

[quarkus-bot[bot]]

/cc @Ladicek (smallrye), @jmartisk (smallrye), @phillip-kruger (smallrye), @radcortez (config,smallrye)

[radcortez]

Hi,

Unfortunately, we don't have an option to do the decryption directly from the CLI. The CLI interacts with application.properties to add, remove, and set configuration, including encrypted values, that can later be decrypted by the running Quarkus application.

It should be possible to add a command to decrypt a value. Let me look into it.

[radcortez]

This is now available in Quarkus 3.30.

#50332