hashicorp / hashicorp/vault-plugin-auth-oci

Unable to create periodic tokens

Open
#43 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
20
Forks
14
Avg merge
2d 1h
Merged PRs (30d)
2

Description

I create a role that has [`token_period`](https://developer.hashicorp.com/vault/api-docs/auth/oci#token_period) set.
```
vault write auth/oci/role/test \
token_period = 1800 \
token_policies = ["some_policy"]
ocid_list = ["REDACTED"]
```
Logging in using the above role does not create a periodic/renewable token:
```
$ vault login -method=oci auth_type=instance role=test
Success! You are now authenticated. The token information displayed below
is already stored in the token helper. You do NOT need to run "vault login"
again. Future Vault requests will automatically use this token.

Key Value
--- -----
token XXXX
token_accessor 7nnArOcb9Wrthmd6SdCTsCmP
token_duration 30m
token_renewable false
token_policies []
identity_policies []
policies []
token_meta_role_name test
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the `auth/oci/role/test` configuration and the `vault login -method=oci auth_type=instance role=test` command. Trace how the OCI role settings are used during login, then verify that `token_period` produces a renewable periodic token with the configured policies and duration.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.