{"action":"closed","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/10554","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/10554/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/10554/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/10554/events","html_url":"https://github.com/rancher/rancher/issues/10554","id":281932134,"number":10554,"title":"[Vault]Instance tokens get revoked only when the stack to which the instance belongs gets deleted. ","user":{"login":"sangeethah","id":4266958,"avatar_url":"https://avatars0.githubusercontent.com/u/4266958?v=4","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false},"labels":[{"id":145695744,"url":"https://api.github.com/repos/rancher/rancher/labels/kind/bug","name":"kind/bug","color":"fc2929","default":false},{"id":203009589,"url":"https://api.github.com/repos/rancher/rancher/labels/status/to-test","name":"status/to-test","color":"66aa66","default":false}],"state":"closed","locked":false,"assignee":{"login":"sangeethah","id":4266958,"avatar_url":"https://avatars0.githubusercontent.com/u/4266958?v=4","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false},"assignees":[{"login":"sangeethah","id":4266958,"avatar_url":"https://avatars0.githubusercontent.com/u/4266958?v=4","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/rancher/rancher/milestones/109","html_url":"https://github.com/rancher/rancher/milestone/109","labels_url":"https://api.github.com/repos/rancher/rancher/milestones/109/labels","id":2910347,"number":109,"title":"v1.6 - Feb 2018","description":"","creator":{"login":"deniseschannon","id":11410997,"avatar_url":"https://avatars1.githubusercontent.com/u/11410997?v=4","gravatar_id":"","url":"https://api.github.com/users/deniseschannon","html_url":"https://github.com/deniseschannon","followers_url":"https://api.github.com/users/deniseschannon/followers","following_url":"https://api.github.com/users/deniseschannon/following{/other_user}","gists_url":"https://api.github.com/users/deniseschannon/gists{/gist_id}","starred_url":"https://api.github.com/users/deniseschannon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deniseschannon/subscriptions","organizations_url":"https://api.github.com/users/deniseschannon/orgs","repos_url":"https://api.github.com/users/deniseschannon/repos","events_url":"https://api.github.com/users/deniseschannon/events{/privacy}","received_events_url":"https://api.github.com/users/deniseschannon/received_events","type":"User","site_admin":false},"open_issues":40,"closed_issues":34,"state":"open","created_at":"2017-11-13T23:35:47Z","updated_at":"2018-02-01T23:56:54Z","due_on":"2018-02-28T08:00:00Z","closed_at":null},"comments":3,"created_at":"2017-12-13T23:27:41Z","updated_at":"2018-02-01T23:56:54Z","closed_at":"2018-02-01T23:56:54Z","author_association":"MEMBER","body":"Rancher versions: Build from v1.6-development\r\n\r\nSteps to reproduce the problem:\r\nHave a setup with 2 hosts.\r\nDeploy \"vault-volume-driver\" using catalog https://github.com/cloudnautique/rancher-catalog - branch add_vault_volume_driver\r\n\r\nCreate a service using volumes in vault-volume-driver with vault policies:\r\nOnce service container is running successfully , from within the containers , unwrap intermediate token to get instance token.\r\n\r\nScenario1:\r\nIn the following 2 cases , new instance token gets created for the user but the old instance tokens  do not get revoked:\r\n\r\nStop service container.\r\nDelete service container.\r\nRestart service container.\r\n\r\nScenario2:\r\nScale down service.\r\nDelete service.\r\nEven after service instances get deleted, instance tokens associated with the deleted instance are not revoked.\r\n\r\nInstance tokens will get revoked only when the stack to which the service instances belongs to gets deleted ."}}
{"actor":{"display_login":"sangeethah"}}