TraGicCode / tragiccode-azure_key_vault

Pull secrets from Azure's key vault with this puppet module.
Apache License 2.0
6 stars 16 forks source link

Puppet integration Net::ReadTimeout error #106

Closed GalynaPchelianska closed 1 year ago

GalynaPchelianska commented 1 year ago

Hello TraGicCode

We are facing the issue of trying to integrate azure KeyVault with Puppet.

The Puppet server is deployed in the AKS cluster. Version is 6.18.1 tragiccode-azure_key_vault version: v3.1.1

Configure manage identity between Azure KeyVault and puppet master.

Our manifest:

$admin_pass = azure_key_vault::secret("my-kv","AdminPass", { metadata_api_version => '2018-04-02', vault_api_version => '2016-10-01', })

notify{"The ADMIN PASS from KeyVAULT is: $admin_pass": }

$rewraped_secret = Sensitive("password: ${admin_pass.unwrap}")

file { 'C:\Config\secret.secret': content => $rewraped_secret, ensure => file, } }

Also have used Service Principal for testing but had the same errors in both cases.

Facing error when running puppet agent on the node

2023-03-10 12:48:39,185 ERROR [puppetserver] Puppet Evaluation Error: Error while evaluating a Function Call, Net::ReadTimeout (file: /etc/puppetlabs/code/environments/env/modules/users/manifests/install.pp, line: 14, column: 17) on node xx-xx-xx-xx-xxxx 2023-03-10 12:48:39,186 ERROR [puppetserver] Puppet Server Error: Evaluation Error: Error while evaluating a Function Call, Net::ReadTimeout (file: /etc/puppetlabs/code/environments/env/modules/users/manifests/install.pp, line: 14, column: 17) on node xx-xx-xx-xx-xxxx

TraGicCode commented 1 year ago

Hey @GalynaPchelianska ,

Based on that error message, This looks to be like some networking related issue in regards to your AKS cluster. I'm not really going to be able to assist much with this.

I would think you would be able to reproduce a similar result if you were to attempt to communicate directly with azure key vault from your puppet server within AKS.

For now, i'm going to close this issue for now.