I’m configuring vault with concourse
vault binary has been installed and available in http://127.0.0.1:8200
concourse is running as docker container with vault related web node params
- CONCOURSE_VAULT_AUTH_BACKEND="approle" - CONCOURSE_VAULT_INSECURE_SKIP_VERIFY=true - CONCOURSE_VAULT_PATH_PREFIX="/concourse" - CONCOURSE_VAULT_AUTH_BACKEND_MAX_TTL=1h - CONCOURSE_VAULT_AUTH_PARAM="role_id:....XXXXX.....,secret_id:.....YYYYYYY......." - CONCOURSE_VAULT_URL=http://127.0.0.1:8200
“approle” has been enabled, role also in place. I could get the role_id, secret_id, client_token as well for the configured role.
Also able to read the vault secrets using the client_token provided with the POST method
But concourse is returning below error when trying to get the secrets during pipeline execution
Finding variable ‘test_key’: Error making API request.
URL: GET http://127.0.0.1:8200/v1/%!/(MISSING)concourse%!/(MISSING)test_role/first_pipeline/test_key
Code: 400. Errors:
- missing client token