Context

On my personal WSL I created a new token for our Vault instance with the appropriate policy and was able to retrieve secrets from there.

However, for some reason any attempt to use vault to retrieve secrets from the Puppet server results in a permission denied when using this new token.

Here’s an example of the curl command:

 curl --insecure -H "X-Vault-Request: true" -H "X-Vault-Token: my.token" https://vault.server.com:8200/v1/path/to/secret/data/secret

Question

Anyone would have any idea why the token created works fine on any server except on the Puppet server ?

Is it possible that there’s some kind of cache on the Vault server that keeps blocking any attempt at retrieving secrets coming from the Puppet server ?

P.S: Retrieving secrets from the Puppet server before changing the token worked fine.