Vault auth broken in 17.0 #10836

jpathy · 2022-03-21T11:40:12Z

jpathy
Mar 21, 2022

Hi,
I was using KC_VAULT_HASHICORP_AUTHENTICATION_APP_ROLE_ROLE_ID and KC_VAULT_HASHICORP_AUTHENTICATION_APP_ROLE_SECRET_ID
env vars in 16.1, seems like they are changed and i can't find any documentation related to how to use vault hashicorp auth?

I am using build time: --vault-url=http://127.0.0.1:8200 --vault=hashicorp
with vault-kv-paths= in keycloak.conf
I get the following error when it uses vault secrets:

Mar 21 11:24:34 th kc.sh[663119]: 2022-03-21 11:24:34,033 ERROR [org.keycloak.services] (executor-thread-3) KC-SERVICES0029: Failed to send email: java.lang.UnsupportedOperationException:>
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultAuthManager.login(VaultAuthManager.java:165)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultAuthManager.vaultLogin(VaultAuthManager.java:145)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultAuthManager.login(VaultAuthManager.java:116)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultAuthManager.login(VaultAuthManager.java:95)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultAuthManager.getClientToken(VaultAuthManager.java:79)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultKvManager.readSecret(VaultKvManager.java:36)
Mar 21 11:24:34 th kc.sh[663119]:         at io.quarkus.vault.runtime.VaultKvManager_ClientProxy.readSecret(Unknown Source)
Mar 21 11:24:34 th kc.sh[663119]:         at org.keycloak.quarkus.runtime.vault.QuarkusVaultProvider.obtainSecretInternal(QuarkusVaultProvider.java:52)

Czini · 2022-09-02T13:14:55Z

Czini
Sep 2, 2022

@jpathy have you managed in the end to configure the vault authentication using environment variables? I have the same issue on my side. If I configure the authentication in the quarkus.properties file and mount that to the container works but that's not the way to go.

1 reply

jpathy Sep 6, 2022
Author

Unfortunately, no, iirc it got removed in some code changes, i haven't checked recently to see what's the status here.

Navigation Menu

Repository navigation

Vault auth broken in 17.0 #10836

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Vault auth broken in 17.0 #10836

Uh oh!

jpathy Mar 21, 2022

Replies: 1 comment · 1 reply

Uh oh!

Czini Sep 2, 2022

Uh oh!

jpathy Sep 6, 2022 Author

jpathy
Mar 21, 2022

Replies: 1 comment 1 reply

Czini
Sep 2, 2022

jpathy Sep 6, 2022
Author