search

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management
https://www.vaultproject.io/
Other
30.98k stars 4.19k forks source link

Documented Kubernetes/Helm Raft HA instructions do not work. #26284

Open e3b0c442 opened 6 months ago

e3b0c442 commented 6 months ago

Describe the bug The Helm+Raft example documented here does not work. Following the listed steps results in the following error when trying to join the second node:

➜  ~ kubectl exec -ti vault-1 -- vault operator raft join http://vault-0.vault-internal:8200
Error joining the node to the Raft cluster: Error making API request.

URL: POST http://127.0.0.1:8200/v1/sys/storage/raft/join
Code: 500. Errors:

* failed to join raft cluster: failed to get raft challenge

To Reproduce Steps to reproduce the behavior:

  1. helm install vault hashicorp/vault --set='server.ha.enabled=true' --set='server.ha.raft.enabled=true' as documented
  2. kubectl exec -ti vault-0 -- vault operator init as documented
  3. kubectl exec -ti vault-0 -- vault operator unseal as documented
  4. kubectl exec -ti vault-1 -- vault operator raft join http://vault-0.vault-internal:8200 as documented

Expected behavior The node joins the raft cluster successfully

Environment:

Vault server configuration file(s): default as created with the helm chart

Additional context I'm following the documentation verbatim and encountering this issue.

divyaac commented 5 months ago

Hi @e3b0c442 ! Thanks for bringing this to our attention. What helm version are you using?

e3b0c442 commented 5 months ago

Latest, at the time. Currently: v3.14.3

e3b0c442 commented 5 months ago

The chart version was v0.27.0.

JoonaHa commented 2 months ago

Hello, I'm facing the same issue. Is there any updates on this? Using Helm v3.14.2 and chart version: 0.28.1

ewinata commented 1 month ago

Hi I am also facing the issue. Using chart version 0.28.0