When behind nginx proxy, vault https url is wrongly constructed

[terryhowe]

When behind nginx proxy, vault https url is wrongly constructed

[TerryHowe]

As long as you have the trailing slash, I think it should work. The only potential problem I see is in the lookup plugin where it strips the trailing /

[chetanagrawal]

@TerryHowe , it does not work with trailing / either. It always strips /vault/

[TerryHowe]

I'm not sure what would be causing the problem. The hashivault_init module calls hashivault_client and the url treatment is:

https://github.com/TerryHowe/ansible-modules-hashivault/blob/master/ansible/module_utils/hashivault.py#L30

and

https://github.com/TerryHowe/ansible-modules-hashivault/blob/master/ansible/module_utils/hashivault.py#L46

I don't see anything in hvac either that would strip the trailing /

[chetanagrawal]

Its urljoin function in hvac module which recreates url removing /vault/

…

On 05-Oct-2017 12:11 AM, "Terry Howe" ***@***.***> wrote: I'm not sure what would be causing the problem. The hashivault_init module calls hashivault_client and the url treatment is: https://github.com/TerryHowe/ansible-modules-hashivault/ blob/master/ansible/module_utils/hashivault.py#L30 and https://github.com/TerryHowe/ansible-modules-hashivault/ blob/master/ansible/module_utils/hashivault.py#L46 I don't see anything in hvac either that would strip the trailing / — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#33 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFe6OxTo2asBFy6O6euHuZvTNEv_VclQks5so9F2gaJpZM4PuAHt> .

[TerryHowe]

import urlparse
urlparse.urljoin('http://localhost/vault/', 'v1/sys/init')
'http://localhost/vault/v1/sys/init'

not for me (with trailing slash).

[chetanagrawal]

I think in module its /v1/sys/init. Can you try urlparse.urljoin('http://localhost/vault/', '/v1/sys/init') On 05-Oct-2017 12:29 AM, "Terry Howe" <[email protected]> wrote: import urlparse urlparse.urljoin('http://localhost/vault/', 'v1/sys/init') 'http://localhost/vault/v1/sys/init' not for me (with trailing slash). — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#33 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFe6O0vNPOgg5EoBpyjjG2lLxWrnz4uIks5so9WIgaJpZM4PuAHt> .

[TerryHowe]

Yes, you are right. Nothing I can do about it though, you'd need to take that up with hvac or change your proxy. https://github.com/ianunruh/hvac/