无法初始化保管箱

时间:2020-08-04 02:11:59

标签: initialization file-permissions hashicorp-vault

我正在尝试使用以下配置初始化Vault

vault.hcl

    List<char> aaaa = new List<char>(){'H','e','l','l','o','g','o','o','d','m','o','r','n','i','n'};
    List<char> dddd = new List<char>(){'e','l','g','o','d'};

    for ( int i = 0 ; i < aaaa.Count; i++ ) {
        if ( !dddd.Contains(aaaa[i])) { // if a char is not contained in dddd
            Console.Write('-');
        }
        else { // if a char is contained in dddd
            Console.Write(aaaa[i]);
        }
    }

vault.conf

path "*"{
    capabilities = [ "read", "list", "update","create" ]
}

它给了我以下错误

backend "file" {
  path = "/vault/vaultsecrets"
}

listener "tcp" {
  address = "0.0.0.0:8200"
  tls_disable = 1
  tls_cert_file = "/vault/certs/host.pem"
  tls_key_file = "/vault/certs/host.key"
  tls_cipher_suites = "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA"
  tls_prefer_server_cipher_suites = "true"

}

disable_mlock = "true"

我认为这与文件权限有关,但不确定在哪里进行更改。

注意:使用Vault:1.0.1可以正常工作,但是当我迁移到Vault:1.4.3时会抛出上述错误

预先感谢

0 个答案:

没有答案