We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Describe the bug
Unbounded memory growth when DAC unix permissions prevent file to be written to disk.
Noticeable CPU usage growth:
To Reproduce Steps to reproduce the behavior:
"template": [ { "source": "/etc/vault_agent/vault.ctmpl", "destination": "/etc/vault_agent/certificate.pem", "perms": "0640", "error_on_missing_key": true } ],
{{- with pkiCert "pki/internal_certs/issue/site-ec" "common_name=***-***.internal.net" -}} {{ .Cert }}{{ .CA }} {{ if .Key }} {{ .Key | writeToFile "/etc/vault_agent/private_key.pem" "" "" "0600" }} {{ end }} {{- end -}}
/etc/vault_agent/private_key.pem
chmod 0400
Expected behavior Failure to write to disk and no memory leak or CPU spike.
Environment:
vault status
vault version
Vault server configuration file(s):
# renew/rotate the cert for associated ica path "pki/${function}/issue/${pkirole}" { capabilities = ["create", "update"] }
Additional context Error:
execute: template: :4:12: executing \"\" at <writeToFile \"/etc/vault_agent/private_key.pem\" \"\" \"\" \"0600\">: error calling writeToFile: open /etc/vault_agent/private_key.pem: permission denied"
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Describe the bug
Unbounded memory growth when DAC unix permissions prevent file to be written to disk.
Noticeable CPU usage growth:
To Reproduce
Steps to reproduce the behavior:
/etc/vault_agent/private_key.pem
is actually configured aschmod 0400
.Expected behavior
Failure to write to disk and no memory leak or CPU spike.
Environment:
vault status
):Vault v1.17.5
vault version
):Vault v1.17.5
unix
Vault server configuration file(s):
Additional context
Error:
The text was updated successfully, but these errors were encountered: