Comments (8)
Hi @laurentiuspurba!
There's an environment variable SKIP_CHOWN
that should be set to true
to avoid the chown
code from running within the Vault container. This should already be set by default, can you check if it is in the Vault pod?
from vault-helm.
Hi @laurentiuspurba, I did identify a bug with audit storage and HA mode (#75). Will fix this soon. Thanks for the report!
from vault-helm.
Hi @jasonodonnell, Thanks for keeping me posted. Looking forward for the fix. Thank you.
from vault-helm.
Hi @laurentiuspurba!
There's an environment variable
SKIP_CHOWN
that should be set totrue
to avoid thechown
code from running within the Vault container. This should already be set by default, can you check if it is in the Vault pod?
Hi @jasonodonnell, I just wanted to give you all information that you need. I can see the enviroment variable SKIP_CHOWN
was set to true
.
from vault-helm.
@laurentiuspurba I just noticed the problem you're encountering from the logs you provided:
You are using a very old version of Vault and this is why you're seeing chown errors (SKIP_SETCAP didn't exist at that time):
Version: Vault v1.0.3
Can you upgrade to the newest image: vault:1.2.3? Please check your container repository where the image is being persisted. It's possible that an old image was tagged with a new version.
from vault-helm.
@jasonodonnell, sure, I will try vault1.2.3
. Thanks!
from vault-helm.
Hi @jasonodonnell After using Vault v1.2.3
, I don't see any warning
related to chown. Let me know if I should close this issue. Thank you.
from vault-helm.
Great, closing!
from vault-helm.
Related Issues (20)
- Latest vault helm chart (0.27.0) does not work with GCPCKMS
- Add a way to create Secrets in the values.yaml
- allow to pin IPs of vault services HOT 3
- json formatted server config converts to a freak vault-config k8s secret which is both hcl and json HOT 1
- Chart prevents synchronisation with ArgoCD when using custom sync label HOT 3
- Add support to external Vault running with tls HOT 2
- Configuring vault ha with raft and ingress HOT 1
- [Feature] Allow the vault sidecar injector to be configured to point to the vault-active service
- storage.raft.fsm: failed to store data: error="input/output error"
- Expose ports for the injector so that a podmonitor can scrape the metrics
- Got unseal error HOT 8
- Bug: Error Creating a raft cluster on OpenShift
- Would violate PodSecurity "restricted:latest" when installing Helm chart
- Vault Agent Injector not working on EKS 1.25 HOT 1
- Deployment options for Gateway API
- Wrong service selector in ServiceMonitor
- Support setting `autopilot_redundancy_zone` in the Vault configuration file HOT 1
- Sidecar agent in CSI can't estabish a TLS connection with an external vault using a custom CA
- Deploying vault on OCI gives seal type Shamir not OCIKMS HOT 1
- Tests Assert that HA Should not be able to set the dataStorage StorageClass
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault-helm.