Vault
Service overview
| Software owner | Hashicorp Vault |
|---|---|
| Management | wfmanager (start | stop | restart | status) vault:* |
| Log files | Access logs: <INSTALL_DIR>/supervisord/log/vault-server.out.log |
| Startup scripts | <INSTALL_DIR>/supervisord/apps/vault.ini <INSTALL_DIR>/vault/vault |
| Configuration files | <INSTALL_DIR>/vault/config/server.hcl |
| Default Ports | tcp 8200 |
Default parameters
| Configuration file | Name | Default value | Description |
|---|---|---|---|
| config.yml | install_dir | /opt/workfusion | Directory to put user files, logs and configs |
| config.yml | vault_port | 8200 | Default service port for installation |
| secrets.yml | vault_admin_cert_file vault_workfusion_cert_file vault_sandbox_cert_file vault_host_cert_file | vault_admin.p12 vault_workfusion.p12 vault_sandbox.p12 vault_host.p12 | Certificates name |
| secrets.yml | vault_admin_cert_pass vault_workfusion_cert_pass vault_sandbox_cert_pass vault_host_cert_pass | password_example password_example password_example password_example | Passwords for certificates |
Troubleshooting
Check if TCP port 8200 is available.
Ports may be custom:
netstat command output
$ netstat -lntp | grep vault
tcp 0 0 0.0.0.0:8200 0.0.0.0:* LISTEN 15116/vault
ss command output
$ ss -ltn | egrep '8200'
LISTEN 0 128 *:8200 *:*
lsof command output
$ lsof -P -n -i :8200 | grep LISTEN
vault 15116 wfuser 3u IPv4 248452 0t0 TCP *:8200 (LISTEN)
Check the default main log files:
- Access logs: <INSTALL_DIR>/supervisord/log/vault-server.out.log
- Error logs: <INSTALL_DIR>/supervisord/log/vault-server.err.log
$ tail -f <INSTALL_DIR>/supervisord/log/vault-server.err.log <INSTALL_DIR>/supervisord/log/vault-server.out.log
Check vault out (access) log using Wfmanager util.
wfmanager tail vault:*
Enable debug information.
Change the appropriate log level to <INSTALL_DIR>/supervisord/apps/vault.ini (default is info) and restart the vault service:
${install_dir}/supervisord/apps/vault.ini
From:
command = bash -c '/opt/workfusion/vault/vault server -config /opt/workfusion/vault/config/server.hcl'
To:
command = bash -c '/opt/workfusion/vault/vault server -config /opt/workfusion/vault/config/server.hcl -log-level=trace'
wfmanager restart vault:*