Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authentication error "invalid vm name" for VMSS instances #169

Open
notheotherben opened this issue Oct 11, 2024 · 1 comment
Open

Authentication error "invalid vm name" for VMSS instances #169

notheotherben opened this issue Oct 11, 2024 · 1 comment

Comments

@notheotherben
Copy link

The regex name validations introduced in #153 places requirements on VM names which are incompatible with the way in which VMSS instance names are constructed (namely they use the VMSS name and append _NNN to uniqely identify instances within the VMSS).

As a consequence, running the v1.18.0 Vault server results in the agent being unable to authenticate using this plugin when running on VMSS instances. Reverting to Vault v1.17.6 resolves the issue (running Vault server v1.17.6 with agents at v1.18.0 works correctly, so this is an issue on the server side - reverting to older versions of the agent doesn't resolve the issue).

Example Log Line (Redacted)

{"@level":"error","@message":"error authenticating","@module":"agent.auth.handler","@timestamp":"2024-10-11T20:00:00.000000Z","backoff":{},"error":"Error making API request.\n\nURL: PUT https://vault:8200/v1/auth/azure/login\nCode: 400. Errors:\n\n* invalid vm name \"vmssname_0\""}
@kpcraig
Copy link
Contributor

kpcraig commented Nov 27, 2024

Sorry about that! #172 should resolve the issue with the underscores in vmss names. It is included in the 0.19.2 version of this plugin, which itself is included in v1.18.2 of Vault.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants