hashicorp / hashicorp/vault-plugin-auth-oci
Unable to create periodic tokens
- Dominant language
- Go
- Stars
- 20
- Forks
- 14
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 2
Description
I create a role that has [`token_period`](https://developer.hashicorp.com/vault/api-docs/auth/oci#token_period) set.
```
vault write auth/oci/role/test \
token_period = 1800 \
token_policies = ["some_policy"]
ocid_list = ["REDACTED"]
```
Logging in using the above role does not create a periodic/renewable token:
```
$ vault login -method=oci auth_type=instance role=test
Success! You are now authenticated. The token information displayed below
is already stored in the token helper. You do NOT need to run "vault login"
again. Future Vault requests will automatically use this token.
Key Value
--- -----
token XXXX
token_accessor 7nnArOcb9Wrthmd6SdCTsCmP
token_duration 30m
token_renewable false
token_policies []
identity_policies []
policies []
token_meta_role_name test
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the `auth/oci/role/test` configuration and the `vault login -method=oci auth_type=instance role=test` command. Trace how the OCI role settings are used during login, then verify that `token_period` produces a renewable periodic token with the configured policies and duration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100