Vault kv_engine_version 1 configuration is not working in Airflow #18326
Unanswered
FelixKJose
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
My Vault is on kv_engine_version is 1. So I tried to configure that as follows in airflow.cfg:
backend_kwargs = {"url": "https://vproxy.us-east.**************.com", "kv_engine_version": 1, "auth_type": "approle", "role_id": "d48b422d-f2cb-****-7781-206104fa7367", "secret_id": "ac48613e-*****-8638-125a-dce1e60aa115", "mount_point": "cf/243d677f-dbe3-****-babc-970ce67ebf3b/secret"}
But when I run a DAG which is trying to pull a connection which is stored in vault, I am getting following error:
Note: s3_connect2 is present in vault and I am able to get that value via a python script using
hvac library as airflow does internally
When I remove kv_engine_version = 1 and has following:
backend_kwargs = {"url": "https://vproxy.us-east.**************.com", "auth_type": "approle", "role_id": "d48b422d-f2cb-****-7781-206104fa7367", "secret_id": "ac48613e-*****-8638-125a-dce1e60aa115", "mount_point": "cf/243d677f-dbe3-****-babc-970ce67ebf3b/secret"}
Then I am getting following error:
Here I can see that its hitting hashicorp_vault.py but when I have kv_engine_version = 1, its not even hitting hashicorp_vault.py. So can someone help me on what am I doing wrong?
Apache Airflow version: 1.10.10
Kubernetes version (if you are using kubernetes) (use
kubectl version
): No, Local machine (MacOS)Environment:
uname -a
):What happened:
getting error for an existing vault secret key:
What you expected to happen:
expected to return the connection from the vault for the given connection_id
Beta Was this translation helpful? Give feedback.
All reactions