{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/2125","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/2125/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/2125/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/2125/events","html_url":"https://github.com/hashicorp/vault/issues/2125","id":191370534,"number":2125,"title":"Configure Vault with Consul Backend with ACLs Enabled - Unexpected response code: 500","user":{"login":"akamalov","id":7885257,"avatar_url":"https://avatars.githubusercontent.com/u/7885257?v=3","gravatar_id":"","url":"https://api.github.com/users/akamalov","html_url":"https://github.com/akamalov","followers_url":"https://api.github.com/users/akamalov/followers","following_url":"https://api.github.com/users/akamalov/following{/other_user}","gists_url":"https://api.github.com/users/akamalov/gists{/gist_id}","starred_url":"https://api.github.com/users/akamalov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akamalov/subscriptions","organizations_url":"https://api.github.com/users/akamalov/orgs","repos_url":"https://api.github.com/users/akamalov/repos","events_url":"https://api.github.com/users/akamalov/events{/privacy}","received_events_url":"https://api.github.com/users/akamalov/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-11-23T20:16:10Z","updated_at":"2016-11-23T21:39:37Z","closed_at":"2016-11-23T20:58:08Z","body":"Greetings,\r\n\r\nTrying to deploy Vault with Consul backend and ACLs enabled.  Here is the procedure:\r\n\r\n**Create ACL Token**\r\n\r\n```\r\n[root@mmaster1 vault-ak]# curl -X PUT -d '{\"name\":\"vault\", \"type\":\"client\",\"rules\": \"key \\\"vault/\\\" {policy=\\\"write\\\"}\" }'  http://consul1.sdncluster1.consul.marathon.mesos:8500/v1/acl/create?token=$TOKEN\r\n\r\n{\"ID\":\"fe5805c6-5950-e484-f557-09af72d1033c\"}\r\n\r\n[root@mmaster1 vault-ak]#\r\n\r\n```\r\n**Create** ```config.hcl``` \r\n\r\n```\r\nlistener \"tcp\" {\r\n  address = \"0.0.0.0:8200\"\r\n  tls_cert_file = \"/vault/config/server-cert.pem\"\r\n  tls_key_file = \"/vault/config/server-key.pem\"\r\n}\r\n\r\nbackend \"consul\" {\r\n  path = \"vault\"\r\n  address = \"consul1.sdncluster1.consul.marathon.mesos:8500\"\r\n  advertise_addr = \"http://vault1.sdncluster1.vault.marathon.mesos:8200\"\r\n  token = \"fe5805c6-5950-e484-f557-09af72d1033c\"\r\n }\r\ndisable_mlock = true\r\nmax_lease_ttl = \"10h\"\r\ndefault_lease_ttl = \"10h\"\r\ncluster_name = \"testcluster\"\r\n```\r\n\r\n**Deploy container:**\r\n\r\nDeploy container with a volume map (config volume). Vault comes up, however after couple of seconds, reports:\r\n\r\n```\r\n[root@mslave2 config]# docker logs -f 66\r\nGenerating RSA private key, 2048 bit long modulus\r\n..............................................................................+++\r\n...............................................................+++\r\ne is 65537 (0x10001)\r\nSignature ok\r\nsubject=/CN=*\r\nGetting Private key\r\n==> Vault server configuration:\r\n\r\n                 Backend: consul (HA available)\r\n         Cluster Address: https://vault1.sdncluster1.vault.marathon.mesos:8201\r\n              Listener 1: tcp (addr: \"0.0.0.0:8200\", cluster address: \"\", tls: \"enabled\")\r\n               Log Level: info\r\n                   Mlock: supported: true, enabled: false\r\n2016/11/23 20:06:07.096997 [WARN ] physical/consul: appending trailing forward slash to path\r\n        Redirect Address: http://vault1.sdncluster1.vault.marathon.mesos:8200\r\n                 Version: Vault v0.6.2\r\n\r\n==> Vault server started! Log data will stream in below:\r\n\r\n2016/11/23 20:06:14.075129 [WARN ] physical/consul: check unable to talk with Consul backend: error=Unexpected response code: 500 (CheckID \"vault:vault1.sdncluster1.vault.marathon.mesos:8200:vault-sealed-check\" does not have associated TTL)\r\n```\r\n\r\nWhat am I missing here ? I tried ```config.hcl``` both with ``` token = \"fe5805c6-5950-e484-f557-09af72d1033c\"``` and ```acl_token = \"fe5805c6-5950-e484-f557-09af72d1033c\"``` but to no avail. Any input would be tremendously appreciated!!\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/262636437","html_url":"https://github.com/hashicorp/vault/issues/2125#issuecomment-262636437","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/2125","id":262636437,"user":{"login":"jefferai","id":28627,"avatar_url":"https://avatars.githubusercontent.com/u/28627?v=3","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"created_at":"2016-11-23T21:39:37Z","updated_at":"2016-11-23T21:39:37Z","body":"> physical/consul: check unable to talk with Consul backend: error=Unexpected response code: 500 (CheckID \"vault:vault1.sdncluster1.vault.marathon.mesos:8200:vault-sealed-check\" does not have associated TTL)\r\n\r\nIf the check is being created by Mesos, it's a Mesos problem. If it's being created elsewhere, the problem lies elsewhere."}}
{"actor":{"display_login":"jefferai"}}