Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] Salt is trying to authenticate during unseal op #85

Closed
7 of 9 tasks
voyvodov opened this issue Sep 4, 2024 · 0 comments · Fixed by #86
Closed
7 of 9 tasks

[BUG] Salt is trying to authenticate during unseal op #85

voyvodov opened this issue Sep 4, 2024 · 0 comments · Fixed by #86
Assignees
@lkubb
Labels
bug Something isn't working

Comments

@voyvodov
Copy link
Contributor

voyvodov commented Sep 4, 2024

Description
Currently if Vault is sealed if you try to run

salt-run vault.unseal

it fails as it tries to authenticate (which is impossible as Vault is sealed).

Setup
(Please provide relevant configs and/or SLS files (be sure to remove sensitive info. There is no general set-up of Salt.)

Please be as specific as possible and give set-up details.

  • on-prem machine
  • VM (Virtualbox, KVM, etc. please specify)
  • VM running on a cloud service, please be explicit and add details
  • container (Kubernetes, Docker, containerd, etc. please specify)
  • or a combination, please be explicit
  • jails if it is FreeBSD
  • classic packaging
  • onedir packaging
  • used bootstrap to install

Steps to Reproduce the behavior
Setup vault and seal it. Add the seal keys in salt's configuration.
Now try to run

salt-run vault.unseal

Expected behavior
Vault is unsealed
@voyvodov voyvodov added the bug Something isn't working label Sep 4, 2024
voyvodov added a commit to voyvodov/saltext-vault that referenced this issue Sep 4, 2024
@voyvodov
fixing salt-extensions#85
8cf21c8 
vault.unseal runner will now use unauthenticated query to unseal Vault
@lkubb lkubb self-assigned this Sep 13, 2024
voyvodov added a commit to voyvodov/saltext-vault that referenced this issue Oct 2, 2024
@voyvodov
fixup! fixing salt-extensions#85
29532b4
@lkubb lkubb linked a pull request Oct 2, 2024 that will close this issue
Make sure vault.unseal runner is unauthenticated #86
Merged
3 tasks
@lkubb lkubb closed this as completed in #86 Oct 2, 2024
lkubb pushed a commit that referenced this issue Oct 2, 2024
@voyvodov
Make sure vault.unseal runner is unauthenticated (#86)
fa84494 
Fixes #85
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@lkubb lkubb

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Make sure vault.unseal runner is unauthenticated voyvodov/saltext-vault
2 participants
@lkubb @voyvodov