Hi,

If you create a vault without -S option then knife vault refresh will fail with:

Response: invalid search query: '[]'

How to reproduce:

Will fail:

root@chef-server:/vagrant/.chef/roles# knife vault create passwords users -E _default '{"root": "root_password"}' -A ftorre2 -C "chef_client"
root@chef-server:/vagrant/.chef/roles# knife vault refresh passwords users
ERROR: The data in your request was invalid
Response: invalid search query: '[]'

Works:

root@chef-server:/vagrant/.chef/roles# knife vault create password users -E _default '{"root": "root_password"}' -A ftorre2 -C "chef_client" -S "role:base"
root@chef-server:/vagrant/.chef/roles# knife vault refresh password users

ENVIRONMENT:

chef -v Chef Development Kit Version: 2.5.3 chef-client version: 13.8.5 delivery version: master (73ebb72a6c42b3d2ff5370c476be800fee7e5427) berks version: 6.3.1 kitchen version: 1.20.0 inspec version: 1.51.21

/usr/bin/knife -v Chef: 13.8.5

and Vault chef-vault (3.3.0)

dpkg -l |grep chef

ii chef 12.21.26-1 amd64 The full stack of chef ii chef-server-core 12.17.33-1 amd64 The full stack of chef-server ii chef-zero 2.0.1-1 all in-memory Chef server (for testing and solo purposes) ii chefdk 2.5.3-1 amd64 The full stack of chefdk

`# /opt/chefdk/embedded/bin/gem list

LOCAL GEMS

activesupport (5.1.5) addressable (2.5.2) app_conf (0.4.2) appbundler (0.11.2) artifactory (2.8.2) ast (2.4.0) aws-sdk (2.11.9) aws-sdk-core (2.11.9) aws-sdk-resources (2.11.9) aws-sigv4 (1.0.2) axiom-types (0.1.1) backports (3.11.1) berkshelf (6.3.1) bigdecimal (default: 1.3.0) binding_of_caller (0.8.0) buff-config (2.0.0) buff-extensions (2.0.0) buff-ignore (1.2.0) buff-ruby_engine (1.0.0) buff-shell_out (1.1.0) builder (3.2.3) bundler (default: 1.16.1) byebug (10.0.0) celluloid (0.16.0) celluloid-io (0.16.2) chef (13.8.5) chef-api (0.8.0) chef-config (13.8.5) chef-dk (2.5.3) chef-provisioning (2.7.0) chef-provisioning-aws (3.0.2) chef-provisioning-fog (0.26.0) chef-sugar (4.0.0) chef-vault (3.3.0) chef-zero (13.1.0) cheffish (13.1.0) chefspec (7.1.2) chefstyle (0.6.0) cleanroom (1.0.0) coderay (1.1.2) coercible (1.0.0) concurrent-ruby (1.0.5) cookbook-omnifetch (0.8.0) cookstyle (2.1.0) cucumber (3.1.0) cucumber-core (3.1.0) cucumber-expressions (5.0.13) cucumber-tag_expressions (1.1.1) cucumber-wire (0.0.1) dco (1.0.1) debug_inspector (0.0.3) dep-selector-libgecode (1.3.1) dep_selector (1.0.6) descendants_tracker (0.0.4) did_you_mean (1.1.0) diff-lcs (1.3) diffy (3.2.0) docker-api (1.34.1) droplet_kit (2.2.2) equalizer (0.0.11) erubis (2.7.0) excon (0.60.0) faraday (0.14.0) fauxhai (5.6.0) ffi (1.9.23) ffi-rzmq (2.0.6) ffi-rzmq-core (1.0.6) ffi-yajl (2.3.1) fog-aws (1.4.1) fog-core (1.45.0) fog-digitalocean (0.3.0) fog-joyent (0.0.1) fog-json (1.0.2) fog-openstack (0.1.24) fog-rackspace (0.1.5) fog-scaleway (0.5.0) fog-softlayer (1.1.4) fog-xenserver (0.3.0) fog-xml (0.1.3) foodcritic (12.3.0) formatador (0.2.5) fuzzyurl (0.9.0) gcewinpass (1.0.0) gherkin (5.0.0) git (1.3.0) google-api-client (0.9.28) googleauth (0.6.2) gssapi (1.2.0) guard (2.14.2) gyoku (1.3.1) hashie (3.5.7) highline (1.7.10) hitimes (1.2.6) htmlentities (4.3.4) httpclient (2.8.3) hurley (0.2) i18n (0.9.5) ice_nine (0.11.2) inifile (3.0.0) iniparse (1.4.4) inspec (1.51.21) io-console (default: 0.4.6) ipaddress (0.8.3) iso8601 (0.9.1) jmespath (1.3.1) json (2.1.0, default: 2.0.4) jwt (2.1.0) kartograph (0.2.7) kitchen-digitalocean (0.9.8) kitchen-dokken (2.6.7) kitchen-ec2 (2.2.1) kitchen-google (1.4.0) kitchen-hyperv (0.5.1) kitchen-inspec (0.23.1) kitchen-vagrant (1.3.1) knife-cloud (1.2.1) knife-ec2 (0.17.0) knife-google (3.2.0) knife-opc (0.3.2) knife-push (1.0.3) knife-spork (1.7.1) knife-windows (1.9.1) libyajl2 (1.2.0) listen (3.1.5) little-plugger (1.1.4) lockfile (2.1.3) logging (2.2.2) logify (0.2.0) lumberjack (1.0.12) memoist (0.16.0) method_source (0.9.0) mime-types (3.1) mime-types-data (3.2016.0521) mini_portile2 (2.3.0) minitar (0.6.1) minitest (5.11.3, 5.10.1) mixlib-archive (0.4.1) mixlib-authentication (1.4.2) mixlib-cli (1.7.0) mixlib-config (2.2.5) mixlib-install (3.9.3) mixlib-log (1.7.1) mixlib-shellout (2.3.2) mixlib-versioning (1.2.2) molinillo (0.6.4) multi_json (1.13.1) multi_test (0.1.2) multipart-post (2.0.0) nenv (0.3.0) net-scp (1.2.1) net-sftp (2.1.2) net-ssh (4.1.0) net-ssh-gateway (1.3.0) net-ssh-multi (1.2.1) net-telnet (0.1.1) nio4r (2.2.0) nokogiri (1.8.2) nori (2.6.0) notiffany (0.1.1) octokit (4.8.0) ohai (13.8.0) openssl (default: 2.0.5) opscode-pushy-client (2.3.0) os (0.9.6) paint (1.0.1) parallel (1.12.1) parser (2.5.0.3) parslet (1.8.2) plist (3.4.0) polyglot (0.3.5) power_assert (0.4.1) powerpack (0.1.1) proxifier (1.0.3) pry (0.11.3) pry-byebug (3.6.0) pry-remote (0.1.8) pry-stack_explorer (0.4.9.2) psych (default: 2.2.2) public_suffix (3.0.2) rack (2.0.4) rainbow (2.2.2) rake (12.3.0, 12.0.0) rb-fsevent (0.10.3) rb-inotify (0.9.10) rb-readline (0.5.5) rdoc (6.0.1, default: 5.0.0) representable (2.3.0) resource_kit (0.1.7) retriable (2.1.0) retryable (2.0.4) ridley (5.1.1) rspec (3.7.0) rspec-core (3.7.1) rspec-expectations (3.7.0) rspec-its (1.2.0) rspec-mocks (3.7.0) rspec-support (3.7.1) rspec_junit_formatter (0.2.3) rubocop (0.49.1) ruby-prof (0.17.0) ruby-progressbar (1.9.0) ruby-shadow (2.5.0) ruby_dep (1.5.0) rubygems-update (2.7.6) rubyntlm (0.6.2) rubyzip (1.2.1) rufus-lru (1.1.0) sawyer (0.8.1) semverse (2.0.0) serverspec (2.41.3) sfl (2.3) shellany (0.0.1) signet (0.8.1) slop (3.6.0) solve (4.0.0) specinfra (2.73.2) sslshake (1.2.0) stove (6.0.0) syslog-logger (1.6.8) systemu (2.6.5) test-kitchen (1.20.0) test-unit (3.2.3) thor (0.19.1) thread_safe (0.3.6) timers (4.0.4) tomlrb (1.2.6) train (0.32.0) treetop (1.6.9) tzinfo (1.2.5) uber (0.0.15) ubuntu_ami (0.4.1) unicode-display_width (1.3.0) uuidtools (2.1.5) varia_model (0.6.0) virtus (1.0.5) winrm (2.2.3) winrm-elevated (1.1.0) winrm-fs (1.1.1) wmi-lite (1.0.0) xmlrpc (0.2.1) yard (0.9.12)`

chef / chef-vault

knife vault refresh - Response: invalid search query: '[]' #312

dpkg -l |grep chef