Comments (1)
Also, to emphasize impact,
This also holds true with the playbook:
- name: download artifacts
aws_s3:
mode: get
bucket: artifact-bucket
object: artifacts.tar.gz
dest: /tmp/artifacts.tar.gz
overwrite: different
aws_access_key: "{{ item.access_key }}"
aws_secret_key: "{{ item.secret_key }}"
register: artifacts
with_vault:
- aws/creds/common_get_s3_artifacts
Expected Results
Download succeeds
Actual Results
TASK [playbook : download artifacts] ************************************
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ClientError: An error occurred (403) when calling the HeadBucket operation: Forbidden
failed: [localhost] (item={u'access_key': u'A', u'secret_key': u'BB', u'security_token': None}) => {"changed": false, "error": {"code": "403", "message": "Forbidden"}, "item": {"access_key": "A", "secret_key": "BB", "security_token": null}, "msg": "Failed while looking up bucket (during bucket_check) artifact-check.", "response_metadata": {"host_id": "AKKKDHHTHAGHGHDHEG@G222222222224455=", "http_headers": {"content-type": "application/xml", "date": "Thu, 22 Feb 2018 16:20:20 GMT", "server": "AmazonS3", "transfer-encoding": "chunked", "x-amz-bucket-region": "us-east-1", "x-amz-id-2": "gAAAAAA+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", "x-amz-request-id": "AAAAAAAAAAAAA"}, "http_status_code": 403, "request_id": "AAAAAAAAAAAAAAA", "retry_attempts": 1}}
NOTE:
Access keys replaced by single-character identifiers.
Secret keys replaced by double-character identifiers matching corresponding access_key identifier.
from ansible-vault.
Related Issues (20)
- Error retrieving data from vault HOT 1
- Allow to iterate over list of secrets not values HOT 1
- is there a plan to add support to VAULT_GITHUB_API_TOKEN? HOT 1
- CERTIFICATE_VERIFY_FAILED HOT 2
- Delay lookups HOT 4
- Quoted parameters should not be split on spaces HOT 1
- Install instructions? HOT 3
- Handle API endpoints that don't return JSON
- Errors with lookup HOT 3
- missing url key, plugin fails, even with ' | default('') ' HOT 5
- Python Crashes when using this Plugin in OSX High Sierra HOT 8
- Cache not used
- Using Python 3.6.4 Unable to retrieve personal token from vault: POST data should be bytes, an iterable of bytes, or a file object. It cannot be of type str. HOT 2
- Test play using vault plugin fails HOT 1
- Inserting variables into a pki lookup statement
- Integration with molecule test 'object has no attribute 'code' HOT 2
- Failing AppRole Authentication
- Unhandled exception with the newest jinja and ansible
- dont support kv-v2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible-vault.