terraform-provider-vault
terraform-provider-vault copied to clipboard
[Bug]: plugin not found in the catalog: oracle-database-plugin
Terraform Core Version
1.8.0
Terraform Vault Provider Version
4.8.0
Vault Server Version
1.18.1
Affected Resource(s)
i try to use vault wit aws rds oracle , but when i run the code terraform to create the vault_database_secret_backend_connection i got this error : module.db.vault_database_secret_backend_connection.backend_connection_db[0]: Creating... ╷ │ Error: error configuring database connection "database_d/config/XXXXXXXXXXXX_base1": Error making API request. │ │ URL: PUT http://127.0.0.1:8200/v1/database/config/XXXXXXXXXXXX_base1 │ Code: 400. Errors: │ │ * error creating database object: invalid database version: 2 errors occurred: │ * plugin not found in the catalog: oracle-database-plugin │ * plugin not found in the catalog: oracle-database-plugin │ │ │ │ with module.db.vault_database_secret_backend_connection.backend_connection_db[0], │ on ../vault.tf line 77, in resource "vault_database_secret_backend_connection" "backend_connection_db": │ 77: resource "vault_database_secret_backend_connection" "backend_connection_db" {
and when i checkd on the vault server i found that the oracle plugin name is "vault-plugin-database-oracle " but the vault provider try to find a plugin with the name "oracle-database-plugin" . i try to use the option "pluin name" on the ressource vault_database_secret_backend_connection but stil got the same error.
Expected Behavior
The vault provider select the correct plugin name and create the resources
Actual Behavior
the vault provider try to find the oracle plugin with the name "oracle-database-plugin" but it found another plugin with name "vault-plugin-database-oracle" . so it crash the terraform
Relevant Error/Panic Output Snippet
╷
│ Error: error configuring database connection "database_d/config/XXXXXXXXXXXX_base1": Error making API request.
│
│ URL: PUT http://127.0.0.1:8200/v1/database_d/config/XXXXXXXXXXXX_base1
│ Code: 400. Errors:
│
│ * error creating database object: invalid database version: 2 errors occurred:
│ * plugin not found in the catalog: oracle-database-plugin
│ * plugin not found in the catalog: oracle-database-plugin
│
│
│
│ with module.db.vault_database_secret_backend_connection.backend_connection_db[0],
│ on ../vault.tf line 77, in resource "vault_database_secret_backend_connection" "backend_connection_db":
│ 77: resource "vault_database_secret_backend_connection" "backend_connection_db" {
Terraform Configuration Files
resource "vault_database_secret_backend_connection" "backend_connection_db" { backend = "database_${local.vault_environment}" name = "XXXXXXXXXXXXXX_${local.database_name}" allowed_roles = ["*"]
plugin_name = "vault-plugin-database-oracle" # i tired this solution but it dosen't work
oracle { connection_url = "{{username}}/{{password}}@${aws_db_instance.default.endpoint}/${local.database_name}" username = "admin_vault" password = random_password.password_admin_vault[count.index].result username_template = "{{ printf "v_prefix_%s_%s" (unix_time | truncate 12) (uuid | truncate 8) | truncate 63 }}" } }
Steps to Reproduce
- I add the rds oracle plugin using this code : wget -O ${scriptpath}/vault/plugins/plugin_database_oracle_0.10.1.zip https://releases.hashicorp.com/vault-plugin-database-oracle/0.10.1/vault-plugin-database-oracle_0.10.1_linux_amd64.zip cd ${scriptpath}/vault/plugins unzip ${scriptpath}/vault/plugins/plugin_database_oracle_0.10.1.zip
- Then i run the terraform code with a Vault server
Debug Output
No response
Panic Output
No response
Important Factoids
vault plugin list -detailed
Name Type Version Container Deprecation Status
alicloud auth v0.19.0+builtin false supported approle auth v1.18.1+builtin.vault false supported aws auth v1.18.1+builtin.vault false supported azure auth v0.19.1+builtin false supported cert auth v1.18.1+builtin.vault false supported cf auth v0.19.0+builtin false supported gcp auth v0.19.1+builtin false supported github auth v1.18.1+builtin.vault false supported jwt auth v0.22.0+builtin false supported kerberos auth v0.13.0+builtin false supported kubernetes auth v0.20.0+builtin false supported ldap auth v1.18.1+builtin.vault false supported oci auth v0.17.0+builtin false supported oidc auth v1.18.1+builtin.vault false supported okta auth v1.18.1+builtin.vault false supported pcf auth v1.18.1+builtin.vault false deprecated radius auth v1.18.1+builtin.vault false supported userpass auth v1.18.1+builtin.vault false supported cassandra-database-plugin database v1.18.1+builtin.vault false supported couchbase-database-plugin database v0.12.0+builtin false supported elasticsearch-database-plugin database v0.16.0+builtin false supported hana-database-plugin database v1.18.1+builtin.vault false supported influxdb-database-plugin database v1.18.1+builtin.vault false supported mongodb-database-plugin database v1.18.1+builtin.vault false supported mongodbatlas-database-plugin database v0.13.0+builtin false supported mssql-database-plugin database v1.18.1+builtin.vault false supported mysql-aurora-database-plugin database v1.18.1+builtin.vault false supported mysql-database-plugin database v1.18.1+builtin.vault false supported mysql-legacy-database-plugin database v1.18.1+builtin.vault false supported mysql-rds-database-plugin database v1.18.1+builtin.vault false supported postgresql-database-plugin database v1.18.1+builtin.vault false supported redis-database-plugin database v0.4.0+builtin false supported redis-elasticache-database-plugin database v0.5.0+builtin false supported redshift-database-plugin database v1.18.1+builtin.vault false supported snowflake-database-plugin database v0.12.0+builtin false supported vault-plugin-database-oracle database n/a false n/a ad secret v0.19.0+builtin false deprecated alicloud secret v0.18.0+builtin false supported aws secret v1.18.1+builtin.vault false supported azure secret v0.20.1+builtin false supported consul secret v1.18.1+builtin.vault false supported gcp secret v0.20.1+builtin false supported gcpkms secret v0.19.0+builtin false supported kubernetes secret v0.9.0+builtin false supported kv secret v0.20.0+builtin false supported ldap secret v1.18.1+builtin.vault false supported mongodbatlas secret v0.13.0+builtin false supported nomad secret v1.18.1+builtin.vault false supported openldap secret v0.14.3+builtin false supported pki secret v1.18.1+builtin.vault false supported rabbitmq secret v1.18.1+builtin.vault false supported ssh secret v1.18.1+builtin.vault false supported terraform secret v0.10.0+builtin false supported totp secret v1.18.1+builtin.vault false supported transit secret v1.18.1+builtin.vault false supported
##############################################
References
No response
Would you like to implement a fix?
None