Comments (5)
tsurankov
commented on August 12, 2024
5
It seems like the correct path should be https://vault.vault.svc:8200/v1/auth/clusters/services/login
I have solved a similar issue with an external Vault server by overriding the env variable in the deploy/injector-deployment.yaml file:
- name: AGENT_INJECT_VAULT_AUTH_PATH value: "auth/clustername"
from vault-k8s.
messiahUA
commented on August 12, 2024
@tsurankov indeed, thanks! I guess this issue can be closed unless there is an opportunity to simply add "auth/" by default to the path.
from vault-k8s.
shuklashashank
commented on August 12, 2024
I am also facing the same issue and I found the correct entry in injector yaml.
AGENT_INJECT_VAULT_AUTH_PATH: auth/kubernetes
from vault-k8s.
jimsnab
commented on August 12, 2024
And for me, using sidecar and GCP:
spec:
template:
metadata:
annotations:
vault.hashicorp.com/auth-path: "auth/gcp"
from vault-k8s.
jimsnab
commented on August 12, 2024
And I found this control in Vault Helm chart:
# Mount Path of the Vault Kubernetes Auth Method.
authPath: "auth/kubernetes"
from vault-k8s.
Related Issues (20)
- Injector failure mode prevents Pod deletion HOT 3
- Injector sidecar is working for inject Pod manifest but Deployment manifest doesn't work HOT 1
- Agent injector should set a maxSize for its tmpfs mount
- Vault agent overwrites kubernetes managedFields
- Allow configuration of the init/sidecar container names globally HOT 1
- Injected config tries to use IRSA token instead of the k8s service account token
- Webhook tries to add initContainer during UPDATE HOT 4
- Stuned deleting of a pod whose parents are job.
- vault.hashicorp.com/agent-init-first does not work with init containers coming from annotations
- Azure authentication method doesn't work with federated token
- Support for an agent-image built FROM scratch
- Auth config block can support common arguments from env and flags
- Tokens not revoked on Vault Agent Shutdown created via a Job using the /agent/v1/quit endpoint HOT 3
- Pipeline Request: Rebuild Dockerhub Image HOT 1
- Support for a securityContext.seccompProfile configuration HOT 1
- Support vault secret inject while the main pod "automountServiceAccountToken" set false HOT 1
- [controller-runtime] log.SetLogger(...) was never called; logs will not be displayed. HOT 1
- Sidecar agent does not handle manually rotated static database secret
- Inject the Agent as a native sidecar HOT 2
- Allow patching the Agent's configuration HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault-k8s.