Manage boundary credential store with terraform

Boundary
1

I am using the terraform provider to manage my credential store. I have been using vault to store the token for this, I have the token set to renewable but have not wrapped my head around why it still disappears at some point but when I attempt to re apply with a new valid token by replacing the one in vault the terraform provider complains about a duplicate resource. I have attempted to use replace but still fails. Am I do this wrong?

resource "boundary_credential_store_vault" "vault" {
  name        = "Vault"
  description = "Main Cred store from vault"
  address     = "https://active.vault.service.consul:8200"
  token       = data.vault_generic_secret.boundary_credstore_main.data["token"]
  scope_id    = boundary_scope.core_infra.id
}

terraform apply -replace=“boundary_credential_store_vault.vault[0]”

1 Like
2

@NegativeFeedback thanks for reporting your issue. There should be a periodic job that renews your token, as long as the controller is up and running this job should keep the token alive. Can you confirm you controller is always up during the period the token begins to fail? If so we can dig into the job_run database and validate it is running as expected.

Re the duplicate resource, each Vault Credential store requires a unique token, if you get the duplicate resource error then token you are updating the store with is already being used?