Vault tokens issue

Vault
1

Hello Team,

I have deployed vault 1.19 on Kubernetes version 1.32.4. We are not able to access secrete using tokens created.

So what we did:-

1:- vault secrets enable -path=airflow kv-v2
2:- vault kv put airflow/db-creds username=XXXX password=XXXX
3:- Created policy as below
vault policy write airflow-policy.hcl - << EOF

path “airflow/db-creds/*” {
capabilities = [“read”]
}
EOF

4:- vault token create -policy=airflow-policy.hcl

So now… We have got the token staring with hvs.XXXX. But when developer us using same url and token in airflow application its says “permission denied”

And when we login to vault url with that created token and when we go in secret tab to see the secret it says “permission denied”..

Can anyone help me in this…

2

I think your path is missing /data/ - since you are using v2 of the K/V secrets engine, there is additional metadata with the secret such as version info.

Check out