You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Trying to use terraform provider "vault generic secret" to manage STS roles in Vault. We had previously created a number of these roles. We upgraded to vault 0.11.4. After upgrading, the vault API returns slightly different json. We've updated our terraform to use that JSON and updates to existing aws secrets work. However, creating a NEW aws secret fails.
API Returns the following on a read:
we can create the role, but then the API returns the array based values on every run.
Expected behavior
API should work with either array or non array types and not throw an error when an array type is passed without throwing an error.
Environment:
Vault Server Version (retrieve with vault status): 0.11.4
Vault CLI Version (retrieve with vault version): NA
Server Operating System/Architecture: CentOS 7
The text was updated successfully, but these errors were encountered:
jasonmcintosh
changed the title
Updated vault has issues with sts aws calls for role creation
Can't create sts aws secret roles when using arrays of types/arns despite API returning arrays
Dec 18, 2018
Trying to use terraform provider "vault generic secret" to manage STS roles in Vault. We had previously created a number of these roles. We upgraded to vault 0.11.4. After upgrading, the vault API returns slightly different json. We've updated our terraform to use that JSON and updates to existing aws secrets work. However, creating a NEW aws secret fails.
API Returns the following on a read:
When we try to create this, we get the following:
We're obviously using a assumed_role credential type. What's interesting is this succeeds all day long on a previously created role.
IF we change the above to:
we can create the role, but then the API returns the array based values on every run.
Expected behavior
API should work with either array or non array types and not throw an error when an array type is passed without throwing an error.
Environment:
vault status
): 0.11.4vault version
): NAThe text was updated successfully, but these errors were encountered: