Edit

Vault

Service overview

Software owner	Hashicorp Vault
Version	0.7.0
Management	wfmanager (start | stop | restart | status) vault:*
Log files	Access logs: ${install_dir}/supervisord/log/vault-server.out.log Error logs: ${install_dir}/supervisord/log/vault-server.err.log
Startup scripts	${install_dir}/supervisord/apps/vault.ini ${install_dir}/vault/vault
Configuration files	${install_dir}/vault/config/server.hcl
Default Ports	tcp 8200

Default parameters

Configuration file	Name	Default Value	Description
config.yml	install_dir	/opt/workfusion	Directory to put user files, logs and configs
config.yml	vault_port	8200	Default service port for installation
secrets.yml	vault_admin_cert_file vault_workfusion_cert_file vault_sandbox_cert_file vault_host_cert_file	vault_admin.p12 vault_workfusion.p12 vault_sandbox.p12 vault_host.p12	Certificates name
secrets.yml	vault_admin_cert_pass vault_workfusion_cert_pass vault_sandbox_cert_pass vault_host_cert_pass	password_example password_example password_example password_example	Passwords for certificates

Troubleshooting

• Check if TCP port 8200 is available.

• Ports may be custom:

  netstat command output:

  $ netstat -lntp | grep vault
  tcp        0      0 0.0.0.0:8200            0.0.0.0:*               LISTEN      15116/vault
  

  ss command output:

  $ ss -ltn | egrep '8200'
  LISTEN     0      128          *:8200                     *:*
  

  lsof command output:

  $ lsof -P -n -i :8200 | grep LISTEN
  vault   15116 wfuser    3u  IPv4  248452      0t0  TCP *:8200 (LISTEN) 
  

• Check the default main log files:

  • Access logs: ${install_dir}/supervisord/log/vault-server.out.log
  • Error logs: ${install_dir}/supervisord/log/vault-server.err.log

  $ tail -f ${install_dir}/supervisord/log/vault-server.err.log ${install_dir}/supervisord/log/vault-server.out.log
  

• Check vault out (access) log using Wfmanager util:

  wfmanager tail vault:*
  

• Enable debug information.

  Change the appropriate log level to ${install_dir}/supervisord/apps/vault.ini (default is info) and restart vault service:

  ${install_dir}/supervisord/apps/vault.ini

  From:
  command = bash -c '/opt/workfusion/vault/vault server -config /opt/workfusion/vault/config/server.hcl'
  To:
  command = bash -c '/opt/workfusion/vault/vault server -config /opt/workfusion/vault/config/server.hcl -log-level=trace'
  

  wfmanager restart vault:*