I’m using self hosted runners and trying to build a pipeline with Hashicorp Vault actions. I run into Error: failed to retrieve vault token. code: ERR_NON_2XX_3XX_RESPONSE, message: Response code 400 (Bad Request), vaultResponse: {"errors":["error validating token: error verifying token signature: failed to verify id token signature"]}
The Vault Role I use:
<code>vault write auth/jwt/role/github - <<EOF
{
"role_type": "jwt",
"user_claim": "user_email",
"bound_claims": {
"repository": "org/repo"
},
"policies": ["github"],
"ttl": "10m"
}
EOF
</code>
<code>vault write auth/jwt/role/github - <<EOF
{
"role_type": "jwt",
"user_claim": "user_email",
"bound_claims": {
"repository": "org/repo"
},
"policies": ["github"],
"ttl": "10m"
}
EOF
</code>
vault write auth/jwt/role/github - <<EOF
{
"role_type": "jwt",
"user_claim": "user_email",
"bound_claims": {
"repository": "org/repo"
},
"policies": ["github"],
"ttl": "10m"
}
EOF
Actions:
<code> - name: Hashicorp Vault
id: import-secrets
uses: hashicorp/vault-action@v3
with:
URL: <URL>
role: github
method: jwt
</code>
<code> - name: Hashicorp Vault
id: import-secrets
uses: hashicorp/vault-action@v3
with:
URL: <URL>
role: github
method: jwt
</code>
- name: Hashicorp Vault
id: import-secrets
uses: hashicorp/vault-action@v3
with:
URL: <URL>
role: github
method: jwt
So I just aim to run some vault cli command in the following steps. I’d appreciate your help get this working. Thank you!