[BUG] Getting 403 error after updating to v2 of vault-action

[vitek-urbanec]

Describe the bug
I'm updating to v2 of your nice vault-action, because the v1 is setting envvars in a way that's going to be decommissioned soon. I keep getting 403 error.

To Reproduce

          - name: secrets
            id: secrets
            uses: hashicorp/[email protected]
            with:
              tlsSkipVerify: true
              url: https://ourmightyvault.ourcompany.com
              method: approle
              roleId: ${{ secrets.VAULT_APPROLE_GITHUB_ACTIONS_ROLE_ID }}
              secretId: ${{ secrets.VAULT_APPROLE_GITHUB_ACTIONS_SECRET_ID }}
              secrets: |
                 ***

Expected behavior
Retrieving the secrets from the vault

Log Output

##[debug]Evaluating condition for step: 'secrets'
##[debug]Evaluating: success()
##[debug]Evaluating success:
##[debug]=> true
##[debug]Result: true
##[debug]Starting: secrets
##[debug]Loading inputs
##[debug]Evaluating: secrets.VAULT_APPROLE_GITHUB_ACTIONS_ROLE_ID
##[debug]Evaluating Index:
##[debug]..Evaluating secrets:
##[debug]..=> Object
##[debug]..Evaluating String:
##[debug]..=> 'VAULT_APPROLE_GITHUB_ACTIONS_ROLE_ID'
##[debug]=> '***'
##[debug]Result: '***'
##[debug]Evaluating: secrets.VAULT_APPROLE_GITHUB_ACTIONS_SECRET_ID
##[debug]Evaluating Index:
##[debug]..Evaluating secrets:
##[debug]..=> Object
##[debug]..Evaluating String:
##[debug]..=> 'VAULT_APPROLE_GITHUB_ACTIONS_SECRET_ID'
##[debug]=> '***'
##[debug]Result: '***'
##[debug]Loading env
Run hashicorp/[email protected]
  with:
    tlsSkipVerify: true
    url: https://ourmightyvault.ourcompany.com
    method: approle
    roleId: ***
    secretId: ***
    secrets: ***
  
    exportEnv: true
    exportToken: false
::group::Get Vault Secrets
Get Vault Secrets
  ##[debug]Retrieving Vault Token from v1/auth/approle/login endpoint
  ##[debug]✔ Vault Token successfully retrieved
  ::group::Token Info
Token Info
  ##[debug]Operating under policies: ["default","github_actions"]
  ##[debug]Token Metadata: {"role_name":"github_actions"}
  ::endgroup::
::endgroup::

Error: Response code 403 (Forbidden)
##[debug]Node Action run completed with exit code 1
##[debug]Finishing: secrets

Additional context
this worked fine with v1.x of the vault-action

[vitek-urbanec]

This was actually caused by the different way of secret scope reference. Closing.

[shivangbhar]

Hi @vitek-urbanec , what do you mean by secret scope reference here?