datasource vault returns an empty map

[zhilyaev]

Versions

• gomplate version 3.10.0
• gomplate version 3.9.0

I have

vault kv get -field=key  secret/test/example                                                                                                                                    
value

I do

gomplate -d vault=vault:///secret/test/example -i '{{(ds "vault")}}'
map[] 

gomplate -d vault=vault:///secret/test/example -i '{{(ds "vault").key}}'                                                                                                         
23:02:48 ERR  error="failed to render template <arg>: template: <arg>:1:6: executing \"<arg>\" at <\"vault\">: map has no entry for key \"key\""

I expect

gomplate -d vault=vault:///secret/test/example -i '{{(ds "vault").key}}'
value

[hairyhenderson]

@zhilyaev can you provide more information about your environment? How are you authenticating to Vault? What environment variables do you have set when you're running gomplate? And - are you certain that the Vault role that gomplate is authenticated with has read permissions set correctly for that path?

[zhilyaev]

@hairyhenderson

I use classic environment variables VAULT_ADDR and VAULT_TOKEN

[zhilyaev]

I have the same

gomplate -d vault=vault://vault.my.local/secret/test/example -i '{{(ds "vault")}}'
map[]%

Also datasourceReachable returns true.

[hairyhenderson]

What version of Vault?

What is the policy attached to the vault token that you're using?

Can you reproduce with vault running locally in dev mode? This might make it easier to track down exactly what's going on.

[zhilyaev]

@hairyhenderson

[hairyhenderson]

Ahh... this is using Vault's K/V v2 endpoint, which has slightly different semantics. Unfortunately, gomplate doesn't fully support that yet. See #862 for details.

I'm going to close this, since #862 is already tracking this issue. If you believe this is not the problem, feel free to re-open and specify why this is different.