Vault API call for secret not working :” {"errors":[]} “

Vault
1

Hello,

We have vault version v1.14.2 installed with consul version V1.16.1 configure with ADFS (OIDC).
All is working fine in the browser. We can create and read secrets (kv type 1)
But we can’t read the secrets with an API call ( we copy the token after logon through OIDC and ADFS.
The error we see with an API call is the following :” {“errors”:} “
Nothing is returned in tracing “vault monitor -log-level=trace”

Call ‘ curl -H “X-Vault-Token: hvs.blablalbla” -X LIST https://dev-app-vault.infrabel.be/custom_path ’ or ‘ curl -H “X-Vault-Token: hvs.blablalbla” -X GET https://dev-app-vault.infrabel.be/custom_path/secret/testsecret ‘

policy:
‘
path “custom_path/*” {
capabilities = [“create”, “read”, “update”, “delete”, “list”]
}
‘

What can we do to further debug this ?
What do we need to do to fix this ?

Best Regards,

David

2

Hi,

You are missing the api port and v1 as you are using kv1, so it should be like so:

curl -X 'GET' \
  'https://dev-app-vault.infrabel.be:8200/v1/custom_path' \
  -H 'accept: */*' \
  -H 'X-Vault-Token: hvs.blablalbla'
3

Thank you tsiamer.
the call is working now with the v1 in the URL

My setup is behind a loadbalancer, so I don’t have to specify the 8200 port.

Best regards,

David

4

You are welcome, good to hear it is fixed.