vault start, get such error: [WARN] storage migration check error: error="Get \"http://%2Fconsul-unix-socket%2Fconsul-client.sock/v1/kv/vault/core/migration\": http: invalid Host header"

[qiangliabcd]

vault use such configmap:
vault.json: |
{
"backend": {
"consul": {
"address": "unix:///consul-unix-socket/consul-client.sock",
"scheme": "http",
"disable_registration": "false"
}
},
"listener": {
"tcp": {
"address": "0.0.0.0:8200",
"tls_cert_file": "/certs/tls.crt",
"tls_key_file": "/certs/tls.key",
"tls_min_version": "tls12",
"tls_cipher_suites": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
}
}
}

consul client use such configmap:
client.json: |
{
"server": false,
"datacenter": "wdc",
"retry_join": [
"consul-0.consul.pltfrm.svc.cluster.local",
"consul-1.consul.pltfrm.svc.cluster.local",
"consul-2.consul.pltfrm.svc.cluster.local"
],
"addresses": {
"http": "unix:///consul-unix-socket/consul-client.sock"
},
"unix_sockets": {
"mode": "600"
},
"encrypt": "xxxxxx",
"log_level": "INFO",
"bind_addr": "0.0.0.0",
"ports": {
"dns": -1,
"https": 8700
},
"verify_outgoing": true,
"verify_incoming": false,
"verify_server_hostname": false,
"key_file": "/certs/tls.key",
"cert_file": "/certs/tls.crt",
"ca_file": "/certs/ca_chain.crt",
"disable_update_check": true,
"leave_on_terminate": true,
"ui": true,
"disable_host_node_id": true
}

consul server use such configmap:
consul.json: |
{
"bootstrap_expect": 3,
"server": true,
"datacenter": "wdc",
"bind_addr": "0.0.0.0",
"client_addr": "0.0.0.0",
"retry_join": [
"consul-0.consul.pltfrm.svc.cluster.local",
"consul-1.consul.pltfrm.svc.cluster.local",
"consul-2.consul.pltfrm.svc.cluster.local"
],
"encrypt": "xxxxxx",
"log_level": "INFO",
"ports": {
"https": 8700,
"http": -1,
"dns": -1
},
"limits": {
"http_max_conns_per_client": 300
},
"verify_outgoing": true,
"verify_incoming": false,
"verify_server_hostname": false,
"key_file": "/certs/tls.key",
"cert_file": "/certs/tls.crt",
"ca_file": "/certs/ca_chain.crt",
"disable_update_check": true,
"leave_on_terminate": false,
"ui": true,
"disable_host_node_id": true
}

with above config, vault:1.11.10 and consul:1.13.8 work well.

now change vault image from 1.11.10 to 1.12.11, when start vault, it report such error:
[WARN] storage migration check error: error="Get "http://%2Fconsul-unix-socket%2Fconsul-client.sock/v1/kv/vault/core/migration": http: invalid Host header"

seem vault version upgrade to 1.12.11 cause this issue, how to fix it? thanks!

[kaleshag]

I have tried with vault 1.12.10 and 1.13.13 to different versions, after 1.11.x for all versions of vault we are having this error.