JetBrains / teamcity-hashicorp-vault-plugin

TeamCity plugin to support HashiCorp Vault
Apache License 2.0
28 stars 18 forks source link

Problems with connection #30

Open luisxkimo opened 4 years ago

luisxkimo commented 4 years ago

Hi,

I have lot of problems to connect with the plugin to my Vault instance. I get different errors when I tried some approach with the parameters.

1. With approle in the role path

image


2. With the path role that I used to read from cli

image

I used this role Id and secret Id in a http post request and it works:

POST: https://vaultinstance.com/v1/auth/approle/login

{
    "role_id":"{{TEMP_ROLE_ID}}",
    "secret_id": "{{TEMP_SECRET}}"
}

RESPONSE

{
    "request_id": "",
    "lease_id": "",
    "renewable": false,
    "lease_duration": 0,
    "data": null,
    "wrap_info": {
        "token": "SSS",
        "accessor": "DDDD",
        "ttl": 120,
        "creation_time": "2020-04-27T16:06:48.271773469Z",
        "creation_path": "auth/approle/login",
        "wrapped_accessor": "VVV"
    },
    "warnings": null,
    "auth": null
}

TC Version: 2019.2.3 (build 72031) Plugin version: 0.1.92 (got from TC compilation)

VladRassokhin commented 4 years ago

Proper value for AppRole auth endpoint path would be role in your case

luisxkimo commented 4 years ago

Hi @VladRassokhin ,

We've tried with some options:

approle approle/ /approle auth/approle auth/approle/ /auth/approle/ /auth/approle auth/approle/login

And every time we get the same error: missing client token