foreman_vault icon indicating copy to clipboard operation
foreman_vault copied to clipboard

A sealed vault causes multiple issues in Foreman/Satellite

Open gardar opened this issue 2 years ago • 1 comments

When the vault is sealed it causes multiple issues across Foreman/Satellite and it's not exactly clear that it is vault that's causing the issue, you have to do some digging to find the root cause. I have two samples but there could be more.

When running attempting to run ansible roles, the task fails instantly with the following error before it can run any of the roles.

Error loading data from Capsule: ArgumentError - wrong number of arguments (given 1, expected 2..3)

image

It also happens when attempting to build a host with errors such as:

dracut-initqueue[7Z9]: Warning: Transient problem: HTTP error Will retry in 1 seconds. 3 retries

image image

What I find a bit strange is that in both of these cases there are no macros from the vault plugin being used, yet somehow it appears to be making requests to vault. There are neither vault macros/variables the kickstart or the ansible job template/ansible roles.

gardar avatar Sep 29 '22 14:09 gardar

Hi @gardar, I'm able to reproduce the issue with sealed Vault, however as soon as I remove the vault_secret macro the template is rendered correctly. Could you please inspect the snippets you use to make sure they do not use macros from the vault plugin?

image

kamils-iRonin avatar Oct 12 '22 14:10 kamils-iRonin