SSH configuration

have authenticated to the target machine using our SSH certificate.
• The ‘sudo’ command prompts for a password.
[adminuser@bastion ~] ssh -i signed.pub -i ~/.ssh/id_rsa adminuser@test Last login: Sun Mar 24 21:06:55 2019 from localhost [adminuser@bastion ~]
[adminuser@bastion ~] [adminuser@bastion ~] sudo whoami
[sudo] password for adminuser:
• Why is adminuser prompted for a password? Why is that a problem?

It has nothing to do with Vault but your sudo configuration. You’ll have to add

admin ALL=(ALL) NOPASSWD:ALL

to your sudoers-file or create one especially for the user admin.

1 Like