Giters

avantoss / vault-infra

Terraform to create Vault infrastructure

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Error parsing Seal configuration

MFProduction opened this issue · comments

commented

Hi, I have a problem setting up vault cluster. I got stuck when I ran vault operator init with the following output:

status code: 400, request id: 259019d2-91e3-4d97-87ab-f92707478cec
vault.service: main process exited, code=exited, status=1/FAILURE
Unit vault.service entered failed state.
vault.service failed.
vault.service holdoff time over, scheduling restart.
Stopped Vault Server.
start request repeated too quickly for vault.service

The problem is that i created my infrastructure in eu-west-2 and vault is looking for KMS certificate in us-east-1, but it was created in eu-west-2.

commented

I have fixed the issue by adding region to the config.hcl

seal "awskms" {
  region     = "${ region }"
  kms_key_id = "${ vault_kms_seal_key_id }"
}
commented

@MFProduction Thanks for the issue! This PR should fix it #7