From b8db364632f799e03dbcdd5b03ce594397610f50 Mon Sep 17 00:00:00 2001 From: Dafydd Jones Date: Fri, 5 Oct 2018 17:43:20 +0100 Subject: [PATCH 1/4] kitchen: test against latest stable version of salt; remove unneeded config entries --- .kitchen.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.kitchen.yml b/.kitchen.yml index 7b07aa7..34948a3 100644 --- a/.kitchen.yml +++ b/.kitchen.yml @@ -9,9 +9,6 @@ verifier: provisioner: name: salt_solo - salt_install: bootstrap - salt_bootstrap_url: https://bootstrap.saltstack.com - salt_bootstrap_options: -p git -p curl stable 2016.11 salt_version: latest log_level: debug require_chef: false From 471656750f614af70e8aba8a1cae612426517359 Mon Sep 17 00:00:00 2001 From: Dafydd Jones Date: Fri, 5 Oct 2018 17:43:59 +0100 Subject: [PATCH 2/4] defaults: bump to latest supported version of vault; remove duplicate entry vault v0.10 introduces kv engine v2, which is not yet supported by salt --- vault/defaults.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/vault/defaults.yaml b/vault/defaults.yaml index d062583..f7f63be 100644 --- a/vault/defaults.yaml +++ b/vault/defaults.yaml @@ -1,10 +1,9 @@ vault: - version: 0.9.1 + version: 0.9.6 listen_protocol: tcp listen_port: 8200 listen_address: 0.0.0.0 tls_disable: 0 - service: upstart tls_cert_file: {} tls_key_file: {} default_lease_ttl: 24h From e883a59449b46404ea1edbbce978d9d4bf1155ef Mon Sep 17 00:00:00 2001 From: Dafydd Jones Date: Fri, 5 Oct 2018 17:47:21 +0100 Subject: [PATCH 3/4] tests: logging output changed upstream (see vault GH#3287) --- test/integration/dev_server_systemd/vault_spec.rb | 2 +- test/integration/dev_server_upstart_s3/vault_spec.rb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/test/integration/dev_server_systemd/vault_spec.rb b/test/integration/dev_server_systemd/vault_spec.rb index 0034098..9c1b841 100644 --- a/test/integration/dev_server_systemd/vault_spec.rb +++ b/test/integration/dev_server_systemd/vault_spec.rb @@ -36,6 +36,6 @@ describe command('journalctl -u vault') do its(:exit_status) { should eq 0 } its(:stderr) { should be_empty } - its(:stdout) { should match(/WARNING: Dev mode is enabled!/) } + its(:stdout) { should match(/WARNING! dev mode is enabled!/) } end diff --git a/test/integration/dev_server_upstart_s3/vault_spec.rb b/test/integration/dev_server_upstart_s3/vault_spec.rb index 2904404..61f5ce9 100644 --- a/test/integration/dev_server_upstart_s3/vault_spec.rb +++ b/test/integration/dev_server_upstart_s3/vault_spec.rb @@ -55,6 +55,6 @@ describe file('/var/log/vault.log') do it { should be_a_file } - its(:content) { should match(/WARNING: Dev mode is enabled!/) } + its(:content) { should match(/WARNING! dev mode is enabled!/) } end From df2d0ae07cb6f208026fa938cd36b79a0292d8f3 Mon Sep 17 00:00:00 2001 From: Dafydd Jones Date: Fri, 5 Oct 2018 19:18:32 +0100 Subject: [PATCH 4/4] defaults: bumpt to latest version vault, with caveat about incompatibility with salt modules --- README.rst | 7 +++++++ vault/defaults.yaml | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/README.rst b/README.rst index 7cef76d..a68eac7 100644 --- a/README.rst +++ b/README.rst @@ -42,6 +42,13 @@ To use it, just include *vault.server* in your *top.sls*, and configure it using service: type: systemd +Issues +====== + +Vault `v0.10.0 `_ introduces a revamped versioned kv backend (version 2), with a breaking change in the paths used to read/write data. This backend is enabled by default when dev mode is enabled. + +The Salt execution modules are not compatible with this new backend, therefore if you intend to access Vault in dev mode using the Salt modules, it's suggested to use an outdated, but compatible version of Vault by setting a pillar value e.g. ``version: 0.9.6``. + Testing ======= diff --git a/vault/defaults.yaml b/vault/defaults.yaml index f7f63be..5c0a851 100644 --- a/vault/defaults.yaml +++ b/vault/defaults.yaml @@ -1,5 +1,5 @@ vault: - version: 0.9.6 + version: 0.11.2 listen_protocol: tcp listen_port: 8200 listen_address: 0.0.0.0