WebUI not available

[Camille Rodriguez]

It seems like the vault charm does not include the vault web UI https://learn.hashicorp.com/vault/getting-started/ui . It would be very interesting to enable it.

[Bartosz Woronicz (mastier1)]

After the research the patch was made as proof-of-concept to enable vault webui (attached)
However it seems that the vault binary we use does not support UI option.

ubuntu@juju-902b45-13:~$ curl -L http://127.0.0.1:8200/ui
...
 <h1>Vault UI is not available in this binary.</h1>
 </div>
 <p>To get Vault UI do one of the following:</p>
 <ul>
 <li><a href="https://www.vaultproject.io/downloads.html">Download an official release</a></li>
 <li>Run <code>make bin</code> to create your own release binaries.
 <li>Run <code>make dev-ui</code> to create a development binary with the UI.
...

So far it seems we must abandon that or keep it in the wishlist.
After resolving there we would need to add relevant functional test to check whether the endpoint runs UI.

[Aurelien Lourot (aurelien-lourot)]

Thanks for reporting and for the research on this. Another difficulty also is that once our charm edits the vault config to enable the UI, it can't really restart the vault to take the config into account as this would re-seal the vault by design.

[Bartosz Woronicz (mastier1)]

The option was implemented along with fixed unittests. However to have it fully working we need vault snap with UI option compiled-in.

https://review.opendev.org/c/openstack/charm-vault/+/778118

[Junien F (axino)]

Hello, any update here ? IS' customers have shown interest in having access to the web UI.

Thanks !

[Alex Kavanagh (ajkavanagh)]

Hi Junien

It's a wish list item and hasn't been prioritised at present. It has a good-first-bug tag which means that it is regularly reviewed as a option for development.

Thanks.