Vault UI secret path confusion

[juchiast]

So I looked at the kv-v2 secret in Vault UI and it show me this information: "API path: /v1/secret/data/flow-server", I thought I have to use this path to refer to the secret in policy and k8s annotations:

path "/v1/secret/data/flow-server" {
  capabilities = ["read"]
}

        vault.hashicorp.com/agent-inject-secret-config.toml: "/v1/secret/data/flow-server"

As it turned out, I have to strip the /v1/ prefix for for it to work.

Suggestion: UI should be showing a "path for configuration" or something similar.

[heatherezell]

Can you please provide more information about your setup, version, etc? Thanks!

[juchiast]

I'm running Vault on Google Cloud Kubernetes via helm, chart version is vault-0.31.0 .

Creating the secret with:

vault secrets enable -path=secret kv-v2
vault kv put -mount=secret flow-server config=-