Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provider seems unusable with Delinea SAAS (not self hosted) #67

Open
benjamin-rousseau-shift opened this issue Apr 10, 2024 · 4 comments
Assignees
Labels
bug Something isn't working

Comments

@benjamin-rousseau-shift
Copy link

benjamin-rousseau-shift commented Apr 10, 2024

Description of the issue

I can't seem to make the provider work with the SAAS version of Delinea.

Expected behavior

The data return a value

Actual behavior
data.tss_secret.test: Reading...

│ Error: 404 Not Found:

Your environment

We have the Delinea SAAS using Secret Server

Steps to reproduce

  required_providers {
    tss = {
      source  = "DelineaXPM/tss"
      version = "2.0.5"
    }
  }
}

provider "tss" {
  password   = "test1234"
  domain     = "contoso.com"
  username   = "app"
  server_url = "https://contoso.delinea.app"
}

data "tss_secret" "test" {
  field = "password"
  id    = "1"
}

output "data" {
  value = data.tss_secret.test.value
}

EDIT : I managed to find an URL that end with .secretservercloud.eu
the error got from 404 to 400 Bad Request: {"error":"Login failed."}
and when I try through the normal rest api I get {"error":"Invalid grant_type"}

@tylerezimmerman
Copy link
Contributor

@benjamin-rousseau-shift this will be resolved in our next release, which should be very soon.

@tylerezimmerman tylerezimmerman self-assigned this Apr 10, 2024
@tylerezimmerman tylerezimmerman added the bug Something isn't working label Apr 10, 2024
@tylerezimmerman
Copy link
Contributor

This should have been resolved in the 2.0.6 release, @benjamin-rousseau-shift can you confirm?

@benjamin-rousseau-shift
Copy link
Author

benjamin-rousseau-shift commented Apr 25, 2024

I confirm that now I can use the global app url contoso.delinea.app
However now I get the following issue :

  • My User is a service account
  • I can login through the UI with it
  • I can see secret id "33" and password value through UI
  • When I try the same thing through terraform I get :
    Error: 401 Unauthorized.

with TF_LOG=TRACE

I found this : error getting accessToken
so it does not seem to be related to the secret, but rather to the authentication method.

@benjamin-rousseau-shift
Copy link
Author

I can get the secret by using the secret server url directly, but I need to login using a local account created directly on the secret server.

It seems very complicated to be honest everything is so unclear. I'm just trying thing at random at this point.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants