Vault Helm Chart - 404s on external HTTP requests

[Erik Salter]

Hi all,

I recently installed a 3-node HA vault setup on EKS with the helm chart, and I'm seeing some unexplained behavior.  Every HTTP request I make will return a 404, even those that should  For instance:

curl -H "X-Vault-Token: <ROOT_TOKEN>" -X GET http://127.0.0.1:8200/v1/secret?list=true

{"errors":["no handler for route 'secret/'"]}

(For reference, I do correctly get a 403 if I specify an incorrect token)

When I actually execute the command on the primary (unsealed) node, I can run the vault commands without issue:

/ # vault secrets list

Path          Type         Accessor              Description

----          ----         --------              -----------

cubbyhole/    cubbyhole    cubbyhole_a208ee71    per-token private secret storage

identity/     identity     identity_420ebd3c     identity store

sys/          system       system_d1b8b1b8       system endpoints used for control, policy and debugging

(I see the vault stores on the Consul backend)

Any ideas?  I don't see anything in the logs, even when I turn the verbosity up to max.

Thanks,

Erik

[Songtao Zhao]

I think the path is wrong.

try "/sys/mounts"

[Erik Salter]

I'm not quite following.  I'm following the API documentation at: https://www.vaultproject.io/api/overview.html.  Or are you referring to something in the helm chart?

[Songtao Zhao]

vault secrets list

-- will list secrets engines enabled in vault.

the corresponding api call should be "/sys/mounts"

https://www.vaultproject.io/api/system/mounts.html