New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Period value not being used on renewal for AWS IAM authenticated tokens #3221

Closed

EXPEddrewery opened this issue Aug 22, 2017 · 1 comment

Contributor

EXPEddrewery commented Aug 22, 2017

Environment:

Vault Version: 0.8.1 (and master)
Operating System/Architecture: Amazon Linux

Expected Behavior:

Instance authenticated using 'auth/aws' where role has Period value set to system default TTL (2764800)
Wait 30 seconds
Renew token returns a new TTL matching the Period value (2764800)

Actual Behavior:

Instance authenticated using 'auth/aws' where role has Period value set to system default TTL (2764800)
Wait 30 seconds
Renew token returns a new TTL not matching the Period value (2764770 or less)

Steps to Reproduce:

Setup a role using the AWS IAM auth backend with a Period set to system default TTL (2764800)
Authenticate an instance using the configured role
Wait 30 seconds
Attempt to renew the token and check the TTL returned. The value should be 2764770 or less.

References:
#3220

Member

jefferai commented Aug 22, 2017

Duplicate of #3220

jefferai marked this as a duplicate of #3220

jefferai closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment