fetching vault secret value using terraform

Question

I am using a vault server with consul as a storage backend and trying to fetch a password value using vault provider in terraform. But it doesn't fetch its value. I stored my secrets at location secret/instances

main.tf

provider "vault" {
 address = "https://<IP_ADDRESS>:<PORT_NUMBER>"
 token = "118bb796-d715-8ce4-b987-7f354ff3f5a7"
}
data "vault_generic_secret" "mypass"{
 path = "secret/instances/password"
}
output "mypassword" {
 value = "${data.vault_generic_secret.mypass.data["value"]}"
}

When i run terraform apply it shows:

data.vault_generic_secret.mypass: Refreshing state...
data.vault_generic_secret.mypass: Refreshing state...

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Please suggest me something what i have done wrong over here as it does not fetch value of password from vault.

any output for ${data.vault_generic_secret.mypass.data}? Check first if you can get the data. — BMW
Thank you for your response. Yes I checked output of suggested command, it also gives nothing like before. — Suneha
I checked vault works fine for me.. I am able to fetch secret value using rest api also. curl -k --header "X-VAULT-TOKEN:118bb796-d715-8ce4-b987-7f354ff3f5a7" -X GET 10.110.159.196:8200/v1/secret/instances/password {"lease_id":"","renewable":false,"lease_duration":2592000,"data":{"excited":"yes","value":"pM0dularc"},"warnings":null,"auth":null} — Suneha

Adeel Ahmad Adeel Ahmad · Accepted Answer · 2018-10-26T12:22:26

I also ran into the similar issue and found this post. In my case issue was with compatibility between terraform and vault. I was using KV version 2 which is not compatible with terraform v0.11.10.

Related Issue: GitHub Link

So i will try to write my answer with working example and environment details as it might help other people.

Vault Version: Vault 0.10.1

Secret Engine Type: KV Version 1

Path: srekv1/development

Terraform Version: Terraform v0.11.10

provider.local v1.1.0
provider.vault v1.1.4

Terraform Code to pull secret:

provider "vault" {

address = "https://vault-myappXXX.net"
skip_tls_verify = true
token = "95XXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}

data "vault_generic_secret" "srekv1" {
  path = "srekv1/development"
}

output Namekv1 {
value = "${data.vault_generic_secret.srekv1.data["Name"]}"
}

fetching vault secret value using terraform

2 Answers