PostgreSQL: permission denied to create role (connection reset fixes)

Vault
1

Hi,

I have the database engine setup in a few environments. In a particular environment after some time we receive this error:

* 1 error occurred: * failed to execute query: pq: permission denied to create role

Resetting the database connection solves the issue for a short time. e.g.

❯ vault read database/creds/role

Error reading database/creds/role: Error making API request.

URL: GET https://development-vault.truelayer.io/v1/database/creds/role
Code: 500. Errors:

* 1 error occurred:
	* failed to execute query: pq: permission denied to create role


❯ vault write -force database/reset/db_name
Success! Data written to: database/reset/db_name
❯ vault read database/creds/role

Key                Value
---                -----
lease_id           database/creds/role/rhI9B36mtVvbTSe2U2IvxWuB
lease_duration     30m
lease_renewable    true
password           password
username           username

This only temporarily fixes the issue until it needs to be reset again. This was experienced on Vault v1.7.0 and still experiencing the issue after upgrading to v1.8.1. This is an RDS PostgreSQL database.

Does anyone have any idea why this might be happening and is it likely to be a bug?

Thanks.

2

Might help if you can share cluster config, DB secret engine config, vault logs, audit logs