medusa icon indicating copy to clipboard operation
medusa copied to clipboard

Error while reading secret

Open stephan2012 opened this issue 6 months ago • 2 comments

My first attempt to export secrets from Vault v1.17.3 with medusa v0.7.2 yields an error even when using a root token (data redacted):

$ medusa export secret -a https://vault.example.com:8200 -t $(<~/.vault-token)  --format yaml
2024/08/14 13:26:10 Error while reading secret
Path:   secret/data//xxx/xxx/xxx/xxx/xxx
Data:   <nil>

2024/08/14 13:26:10 Error while reading secret
Path:   secret/data//xxx/xxx/xxx/xxx/xxx
Data:   <nil>

2024/08/14 13:26:10 Error while reading secret
Path:   secret/data//xxx/xxx/xxx/xxx/xxx
Data:   <nil>

xxx:
  xxx:
    xxx:
      xxx: {}
      xxx: {}
    xxx:
      xxx: {}

So, medusa finds the secrets but cannot read them. The two slashes between secret/data and the secret path look strange. The KV secrets engine is v2:

$ vault secrets list -detailed 
Path             Plugin       Accessor              Default TTL    Max TTL      Force No Cache    Replication    Seal Wrap    External Entropy Access    Options                       Description                                                UUID                                    Version    Running Version          Running SHA256    Deprecation Status
----             ------       --------              -----------    -------      --------------    -----------    ---------    -----------------------    -------                       -----------                                                ----                                    -------    ---------------          --------------    ------------------
secret/          kv           kv_063b078a           system         system       false             replicated     false        false                      map[version:2]                n/a                                                        957a17bc-d9cb-3cf7-0696-78a771f226c1    n/a        v0.19.0+builtin          n/a               supported

What do I miss?

stephan2012 avatar Aug 14 '24 11:08 stephan2012