Postgres create_statement string not saved properly during database role creation in browser CLI

[rlanga]

I'm trying to set up PostgreSQL in the database secrets engine through the Vault browser CLI in the UI. I've been following the instructions and steps from the documentation: https://www.vaultproject.io/docs/secrets/databases/postgresql.html

Environment:

• Vault Version: 1.1.2
• Operating System/Architecture: Docker image vault:1.1.2

Expected Behavior:

$ vault read database/roles/api-prod
Key                   Value       
creation_statements   ["CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; \
        GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";"]
db_name               apiprod  
default_ttl           300         
max_ttl               3600        
renew_statements      []          
revocation_statements []          
rollback_statements   []          

Actual Behavior:

$ vault read database/roles/api-prod
Key                   Value       
creation_statements   ["\"CREATE"]
db_name               apiprod  
default_ttl           300         
max_ttl               3600        
renew_statements      []          
revocation_statements []          
rollback_statements   []          

Steps to Reproduce:

$ vault write database/roles/api-prod db_name=apiprod creation_statements="CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";" default_ttl=1h max_ttl=24h

I also tried replacing the double quotes on the creation statement with single quotes and got this:

Actual Behavior:

$ vault read database/roles/api-prod
Key                   Value                                                                                                                                                         
creation_statements   ["CREATE ROLE \\\"{{name}}\\\" WITH LOGIN PASSWORD {{password}} VALID UNTIL {{expiration}}; GRANT SELECT ON ALL TABLES IN SCHEMA public TO \\\"{{name}}\\\";"]
db_name               apiprod                                                                                                                                                    
default_ttl           3600                                                                                                                                                          
max_ttl               86400                                                                                                                                                         
renew_statements      []                                                                                                                                                            
revocation_statements []                                                                                                                                                            
rollback_statements   []                                                                                                                                                            

Steps to Reproduce:

$ vault write database/roles/api-prod db_name=apiprod creation_statements='CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";' default_ttl=1h max_ttl=24h