static-roles error - The first serveral times for using the following commands work perfectly. However, starting from the forth time, the output becomes something does not expected.

[wongkafai]

The first serveral times for using the following commands work perfectly. However, starting from the forth time, the output becomes something does not expected.

https://learn.hashicorp.com/vault/secrets-management/db-creds-rotation

[root@VAULTM01 ~]# vault secrets enable database
Success! Enabled the database secrets engine at: database/

[root@VAULTM01 ~]# vault write database/config/postgresql
plugin_name=postgresql-database-plugin
allowed_roles="*"
connection_url=postgresql://{{username}}:{{password}}@172.31.18.141:5432/postgres?sslmode=disable
username="root"
password="rootpassword"

[root@VAULTM01 ~]# vault write database/static-roles/education
db_name=postgresql
rotation_statements="ALTER USER "{{name}}" WITH PASSWORD '{{password}}';"
username="vault-edu"
rotation_period=200
Success! Data written to: database/static-roles/education

[root@VAULTM01 ~]# vault write database/static-roles/education
db_name=postgresql
rotation_statements="ALTER USER "{{name}}" WITH PASSWORD '{{password}}';"
username="vault-edu"
rotation_period=200
Error writing data to database/static-roles/education: Put https://172.31.18.141:8200/v1/database/static-roles/education: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

As there is a bug making the timeout, the password cannot be changed even ttl is 0.

[ncabatoff]

Hi @wongkafai,

Is there anything in your vault log that might explain the timeout?

[catsby]

Related #7467

[wongkafai]

vault_audit.log

Syslog.txt

[wongkafai]

No log for timeout

[ncabatoff]

Fixed in #7518.