spring-cloud / spring-cloud/spring-cloud-vault

org.springframework.vault.VaultException: Cannot renew lease: Status 400 Bad Request lease expired

Open
#721 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

status: waiting-for-feedback
Dominant language
Java
Stars
291
Forks
152
Avg merge
11h 24m
Merged PRs (30d)
3

Description

Describe the bug

Once the vault lease expired , lease not renew and getting the below issue

org.springframework.vault.VaultException: Cannot renew lease: Status 400 Bad Request lease expired

Once the lease expired getting the
The provided token has expired. (Service: Amazon S3; Status Code: 400; Error Code: ExpiredToken; Request ID: 4AP7WCZ4N57C46T322; S3 Extended Request ID: s+75L1hrOTLq/oFNDL9DvVYP1R+4KDL7NvpNzISyuGxe345s324232332434=; Proxy: null)"

Sample

spring.cloud.vault.enabled=true
spring.cloud.vault.scheme=https
spring.cloud.vault.host=vault-host
spring.cloud.vault.port = port
spring.cloud.vault.uri = uri
spring.cloud.vault.config.lifecycle.min-renewal = 1m
spring.cloud.vault.config.lifecycle.expiry-threshold = 5m
spring.cloud.vault.token=KUBERNETES

spring.cloud.vault.aws.enabled=true
spring.cloud.vault.aws.role=dev-role
spring.cloud.vault.aws.backend=aws
spring.cloud.vault.aws.credential-type=assumed_role
spring.cloud.vault.aws.access-key-property=cloud.aws.credentials.accessKey
spring.cloud.vault.aws.secret-key-property=cloud.aws.credentials.secretKey
spring.cloud.vault.aws.session-token-key-property=cloud.aws.credentials.sessionToken

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Start by reproducing the expired-lease case with the provided Spring Cloud Vault and AWS settings, then trace lease renewal and credential propagation; done means the expired lease is handled without the reported Vault exception or expired S3 token.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, java, spring
Domain
backend, cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.