VAULT QUESTIONS MUST BE DEVELOPER-RELATED. Vault is an open-source platform designed to store secrets securely, Questions about configuring vault should be asked on https://serverfault.com. Not to be confused with [ansible-vault].
Questions tagged [vault]
300 questions
0
votes
0 answers
How to make vault write request with Vault agent from a helm deployment?
I have a running vault server, I enabled transit secret engine and created a vault transit secret backend_key through terraform.
resource "vault_mount" "transit" {
path = "transit"
type = "transit"
}
resource "vault_transit_secret_backend_key"…
Bala krishna
- 519
- 1
- 10
- 24
0
votes
0 answers
Executing selenium tests with cucumber and reading from vault
I am trying to run cucumber selenium webdriver tests and I want to fetch some values from vault.
It currently doesn't resolve the vault path and I am not sure if it may be because of how my project is setup.
My project structure appears like so (no…
hello12345
- 11
- 1
0
votes
1 answer
Vault mongodb database connection failing due to unable to authenticate using mechanism “SCRAM-SHA-1” despite successful mongoshell login
I bashed into the mongo router pod and used the connection string to obtain the mongo shell and was able to access admin db
I replaced original username and password.
root@nexus-config-mongo-cluster-router-node1-rc-fcwnj:/# mongo --verbose…
Anish Mathew
- 11
- 2
0
votes
0 answers
Helm Vault agent-inject-template annotations incorrect rendering
I'm using below agent inject annotations in my deployment file. But the rendered output is not what i'm expecting. TIA
vault.hashicorp.com/agent-inject-secret-cos.json: "observability/data/dev/cosapikey"
…
Raghavendra
- 521
- 5
- 11
0
votes
0 answers
Generate Data Key from vault transit secret engine
I have a running vault server, I enabled transit secret engine and created a vault transit secret backend_key through terraform.
resource "vault_mount" "transit" {
path = "transit"
type = "transit"
}
resource "vault_transit_secret_backend_key"…
Bala krishna
- 519
- 1
- 10
- 24
0
votes
0 answers
Inconsistent communication between vault and consul container
While I am trying to build an application which requires consul container to communicate with vault container when generating ACL token roles for other service containers, consul container is facing an inconsistent error,
" Failed to configure…
0
votes
0 answers
jenkins in docker not connect with vault server hosted in my local pc
I installed docker in my windows 10 and run jenkins with alpine openjdk 11, and it seems to work ok, because it can download the code from github but the problem is when it needs to get the secret from Vault server hosted in my local PC. Actually I…
solidusAndryi
- 1
- 1
0
votes
1 answer
High Available Hashicorp Vault Cluster Installation on VMWare
I want to set up a High Available Hashicorp Vault Cluster on our servers hosted on VMware.
When I followed Hashicorp's documentation, I found that the most convenient and simple is to use the Raft Storage Backend for a HA Vault Cluster.…
mek
- 27
- 5
0
votes
0 answers
Integration HashiCorp Vault and Spring Cloud Config Server for few client-services
I need to integrate Vault with spring cloud config server. For example, I have two client services, spring cloud config server and Vault. I need that my clients will go to the spring cloud config server and he will back settings (from git for…
Sergey Korotaev
- 1
- 2
0
votes
1 answer
Terraform array variable to string from vault
I want to use an array to be used as a secret in the vault,
but the required value is not as expected it carries the backslash \ character after being output in terraform. i tried to use trim in terraform but it just erased some backslashes and the…
badTyping
- 15
- 4
0
votes
1 answer
Vault transit engine key lease duration
I see the following output after creating a key with HashiCorp vault’s transit engine using vault write -f transit/keys/transit_key exportable=true command-
...
“lease duration”: 0,
“lease_id”: “”,
“renewable”: false
...
Does this mean that the key…
Shradha
- 2,232
- 1
- 14
- 26
0
votes
1 answer
Vault csi provider in gcp
I'm trying to run Vault CSI provider but I'm getting the following error in my app pod:
MountVolume.SetUp failed for volume "secrets-store-inline" : rpc error: code = Unknown desc = failed to mount secrets store objects for pod…
wipcrep
- 19
- 1
- 7
0
votes
0 answers
Running into certificate errors when running puppet agent config using vault lookup
I'm running into certificate errors when I run "puppet agent -t" using a vault lookup module in my branch for the agent config. Here's the errors I get:
"Failed to apply catalog: certificate verify failed" and "The certificate for does not match…
splatGPT
- 1
0
votes
0 answers
how to define entrypoint command in dependency helm chart
I have this issue. I need to setup oauth2-proxy in kubernetes via helm, and I need it to use injected vault secret for configuration of proxy. I know that this would be possible by defining
'command' : ['sh', '-c', 'source…
0
votes
1 answer
Status 400 Bad Request: failed to revoke entry... cannot be dropped because some objects depend on it (SQLSTATE 2BP01);
I have configured my spring boot application to obtain the database credentials from the vault database backend. This is working fine when I run it with the vault in 'vault for development mode'. But, now I am trying to get it to work when the vault…
udani
- 1,243
- 2
- 11
- 33