vault
vault copied to clipboard
[metrics] missing vault.identity.entity.creation
Describe the bug
It seems that vault.identity.entity.creation wasn't exposed on metrics endpoint
To Reproduce Steps to reproduce the behavior:
- Run
curl https://$VAULT_ADDR/v1/sys/metrics\?format\=prometheus | grep identity_entity - Analyse output
# TYPE vault_identity_entity_active_partial_month gauge
vault_identity_entity_active_partial_month{cluster="vault-cluster-xxxxxx"} 16
# HELP vault_identity_entity_alias_count vault_identity_entity_alias_count
# TYPE vault_identity_entity_alias_count gauge
vault_identity_entity_alias_count{auth_method="gcp",cluster="vault-cluster-xxxx",mount_point="auth/gcp/",namespace="xxxx"} 1
vault_identity_entity_alias_count{auth_method="jwt",cluster="vault-cluster-xxxxx",mount_point="auth/jwt/",namespace="xxxx"} 2
vault_identity_entity_alias_count{auth_method="jwt",cluster="vault-cluster-xxxxx",mount_point="auth/jwt/",namespace="xxxx"} 1
vault_identity_entity_alias_count{auth_method="kubernetes",cluster="vault-cluster-xxxxx",mount_point="auth/kubernetes/",namespace="xxxx"} 1
vault_identity_entity_alias_count{auth_method="kubernetes",cluster="vault-cluster-xxxxx",mount_point="auth/kubernetes/gke-xxxxx/",namespace="xxxx"} 1
vault_identity_entity_alias_count{auth_method="oidc",cluster="vault-cluster-xxxxx",mount_point="auth/oidc/",namespace="xxxxx"} 4
# HELP vault_identity_entity_count vault_identity_entity_count
# TYPE vault_identity_entity_count gauge
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 0
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 1
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 3
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 0
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 31
vault_identity_entity_count{cluster="vault-cluster-xxxxx",namespace="xxxx"} 1
- There is no
vault.identity.entity.creation
Expected behavior Expected entity metrics from documentation
Environment:
- Vault Server Version (retrieve with
vault status): 1.11.0+ent with client counts - Vault CLI Version (retrieve with
vault version): - Server Operating System/Architecture: Vault enterprise on K8s cluster
I can try to take a look into this if that's alright.
This may be working as expected where typically create / creation matrices are only reported after the events occur and for a limited period - not all the time / constantly.
Hey @bogaertg can you share the (HCL)Vault config file you used?