opentelekomcloud / vault-plugin-secrets-openstack

Create OpenStack tokens using HashiCorp Vault
Apache License 2.0
23 stars 6 forks source link

No user error when user_group is not available #105

Closed gtema closed 1 year ago

gtema commented 1 year ago

Reading from dynamic role which is set to assign user to not existing user_group does not return any information back to the user - it is silently ignored.

I do not know what is better in this situation for now, but returning a token that is literally not doing what is expected is not correct

gtema commented 1 year ago

Perhaps raising 409 is most suitable

lego963 commented 1 year ago

@gtema do you mean that you tried to assign a user to a non-existent group and no err was returned. Is it right?

gtema commented 1 year ago

yes, regular creds were returned without user being added into the group

artem-lifshits commented 1 year ago

User_group verification is now added, closing the ticket.