view existing app-id/user-id's

[Jay Christopherson]

Is there a way to view existing app-id's and user-id's?

I've tried both "vault list auth/app-id/map/app_id" and "vault list auth/app-id/map/user-id" and various levels of that command, but I just get back a 500 error.

I'm interested in seeing which and how many of each that I have.

Thanks!

[Jeff Mitchell]

There is not currently, no. I think a PR for listing app-ids would be
accepted but user-ids are stored salted and hashed so there's no way
to meaningfully list them.

--Jeff

> --
> This mailing list is governed under the HashiCorp Community Guidelines -
> https://www.hashicorp.com/community-guidelines.html. Behavior in violation
> of those guidelines may result in your removal from this mailing list.
>
> GitHub Issues: https://github.com/hashicorp/vault/issues
> IRC: #vault-tool on Freenode
> ---
> You received this message because you are subscribed to the Google Groups
> "Vault" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to vault-tool+...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/vault-tool/f5a0e621-3692-4fd3-b30e-af3c55833f3a%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Jay Christopherson]

that's fine, the app-id's are more useful in terms of listing anyhow.

[Ashish Rathore]

Hi @Jeff Mitchell

When can we expect above feature means in which version.

[Lars Sommer]

Definitely also interested in this feature as well. My use case:

I am using a Docker container to configure Vault programatically for newly spun up applications and sometimes the registration of applications returns a 204 but fails to actually register the app. Rerunning the configuration job resolves the issue, but I'd rather simply validate my configurations for a more logic based workflow. 

Also just generally knowing what's there is a good thing =)

[Adam Greene]

Hi Lars,

the next release of Vault contains the AppRole backend, which looks to be the replacement for app-id.  Check out: https://github.com/hashicorp/vault/blob/master/website/source/docs/auth/approle.html.md

it gives you more flexibility and control, including listing of roles.  I used the old app-id backend and converting to app-role can be pretty close to a drop-in replacement