如何修复 provider.vault：找不到保险库令牌？

Question

这是关于保险库提供者的official docs，事情是：

provider "vault" {
  version = "2.10.0"
  address = "..."
}

我确实设置了VAULT_ADDR 和VAULT_TOKEN：

terraform plan -lock=false dev/foo_dev
Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.

data.aws_iam_policy_document.foo_doc: Refreshing state...

------------------------------------------------------------------------

Error: Error running plan: 1 error occurred:
        * provider.vault: no vault token found
make: *** [plan] Error 1
✗ echo $VAULT_ADDR 
...
✗ echo $VAULT_TOKEN
...

token - （必需）Terraform 将用于进行身份验证的 Vault 令牌。可以通过 VAULT_TOKEN 环境变量设置。

如果我删除address = "..."，我会看到同样的错误，因此它也无法检索VAULT_ADDR。

Answer 1

您是否导出了变量？你需要使用

export VAULT_TOKEN=s.123456789abc
export VAULT_ADDR=vault.company.org

不只是

VAULT_TOKEN=s.123456789abc
VAULT_ADDR=vault.company.org

否则terraform 将看不到这些变量。