Overview

What is the Admin Service?

The arya-banking-admin-service is the administrative backbone of the Arya Banking event-driven microservices platform. It serves a dual purpose:

• Infrastructure Administration — Manages HashiCorp Vault secrets, AppRole credentials, and HCL policies programmatically via a REST API.
• Identity Administration — Manages Keycloak realm roles and inter-service OAuth2 clients via the Keycloak Admin Client.

All APIs are protected by JWT-based OAuth2 Resource Server (Keycloak-issued tokens) and role-checked at the method level via a custom RolePermissionValidator backed by the security.api-roles configuration map.

Service Coordinates

Responsibilities

The admin-service is the only service in the platform that has elevated Vault and Keycloak privileges. Other services receive read-only access; the admin-service provisions, manages, and rotates that access.

Vault Management

• Create, read, update, and delete KV v2 secrets scoped to individual services under secret/arya-banking/{service}/dev
• Full CRUD over Vault AppRoles — including generating fresh roleId / secretId credential pairs
• Upload and delete HCL policy files (stored as classpath resources, versioned in Git)

Keycloak Management

• Create confidential OAuth2 clients for inter-service communication (service accounts flow)
• Create, list, and query realm-level roles
• Assign the INTERNAL_SERVICE realm role to the service account of newly-created clients

Technology Stack