hashicorp/vault-guides

Vault raft storage local guide: ./cluster.sh setup vault_1 error - failed to read environment: open /etc/vault.d/client-certs/client-cert.pem: no such file or directory

bbros-dev opened this issue · 1 comments

$ vault --version
Vault v1.5.3 (9fcd81405feb320390b9d71e15a691c3bc1daeef)

Following the local raft Vault cluster guide:

$ ./cluster.sh setup vault_1

[vault_1] starting Vault server @ http://127.0.0.1:8200

[vault_1] initializing and capturing the unseal key and root token
failed to read environment: open /etc/vault.d/client-certs/client-cert.pem: no such file or directory

The log file:

==> Vault server configuration:

             Api Address: http://127.0.0.1:8200
                     Cgo: disabled
         Cluster Address: https://127.0.0.1:8201
              Go Version: go1.14.7
              Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_size: "33554432", tls: "disabled")
               Log Level: trace
                   Mlock: supported: true, enabled: false
           Recovery Mode: false
                 Storage: inmem
                 Version: Vault v1.5.3
             Version Sha: 9fcd81405feb320390b9d71e15a691c3bc1daeef

==> Vault server started! Log data will stream in below:

2020-09-15T22:30:50.645+1000 [INFO]  proxy environment: http_proxy= https_proxy= no_proxy=
2020-09-15T22:30:50.646+1000 [DEBUG] storage.cache: creating LRU cache: size=0
2020-09-15T22:30:50.646+1000 [DEBUG] cluster listener addresses synthesized: cluster_addresses=[127.0.0.1:8201]

The vault_1 configuration:

storage "inmem" {}
listener "tcp" {
  address = "127.0.0.1:8200"
  tls_disable = true
}
disable_mlock = true

Same problem. Also, while you people are at it: https://github.com/hashicorp/vault-guides/blob/master/operations/raft-storage/local/cluster.sh#L170-L172 why the same command three times?