# \[Solved\] Drone agent does not retrieve vault secret

**URL:** <https://drone.discourse.group/t/solved-drone-agent-does-not-retrieve-vault-secret/8738>\
**Category:** Drone FAQ\
**Created:** [September 11, 2019, 4:35pm UTC](https://drone.discourse.group/t/solved-drone-agent-does-not-retrieve-vault-secret/8738 "2019-09-11T16:35:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![anhgien](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/anhgien/32/5815_2.png) [@anhgien](https://drone.discourse.group/u/anhgien)\
**Post date:** [September 11, 2019, 4:35pm UTC](https://drone.discourse.group/t/solved-drone-agent-does-not-retrieve-vault-secret/8738/1 "2019-09-11T16:35:47Z")

</div>

Hi, I’m using drone docker (both server and agent) (latest image version).  
Problems: The drone agent seems does not get secret from vault, but when I use drone cli to debug, it prints the secret.

- The drone cli cmd:  
`drone plugins secret get secret/docker password --endpoint=http://myvaultdomain:3020 --secret=myvaultsecret --repo=gien/drone-ci-test`

- Docker run agent:  
`docker run -d -v /var/run/docker.sock:/var/run/docker.sock -e DRONE_RPC_PROTO=https -e DRONE_RPC_HOST=mydomain -e DRONE_RPC_SECRET=rpcsecret -e DRONE_RUNNER_CAPACITY=2 -e DRONE_RUNNER_NAME=cidroneagent-4 -e DRONE_SECRET_PLUGIN_ENDPOINT=http://myvaultdomain:3020 -e DRONE_SECRET_PLUGIN_TOKEN=myvaultsecret -e DRONE_RUNNER_LABELS="name:agent4" -p 7001:3000 --restart always --name runner drone/agent`

- Here is docker run drone/vault:  
`docker run --env=SECRET_KEY=mysecretkey --env=VAULT_ADDR=http://myvaultdomain:8200 --env=VAULT_TOKEN=myvaulttoken --env=VAULT_SKIP_VERIFY=true --env=DEBUG=true --publish=3020:3000 drone/vault`

- And the last is my .drone.yaml file:

```auto
---
kind: secret
name: username
get:
  path: secret/data/docker
  name: username

---
kind: secret
name: password
get:
  path: secret/data/docker
  name: password

---
kind: pipeline
name: default

node:
  name: agent4

steps:
- name: logging
  image: alpine
  environment:
    USERNAME:
      from_secret: username
    PASSWORD:
      from_secret: password
  commands:
  - env 

```

The loggin step does not print USERNAME env variable

---

<div class="post-metadata">

**Author:** ![tamasf97](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/tamasf97/32/5884_2.png) [@tamasf97](https://drone.discourse.group/u/tamasf97)\
**Post date:** [September 11, 2019, 8:10pm UTC](https://drone.discourse.group/t/solved-drone-agent-does-not-retrieve-vault-secret/8738/2 "2019-09-11T20:10:05Z")

</div>

The agent is wrongly documented, you need to use `DRONE_SECRET_ENDPOINT` instead of `DRONE_SECRET_PLUGIN_ENDPOINT`, and `DRONE_SECRET_SECRET` instead of `DRONE_SECRET_PLUGIN_TOKEN`.

Most likely the new variables described in the documentation will also work at some point, but the code doesn’t seem to be updated for them yet. I struggled the same way [in this thread](http://discuss.harness.io/t/solved-external-secret-empty-unreliable/5594).

---

<div class="post-metadata">

**Author:** ![anhgien](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/anhgien/32/5815_2.png) [@anhgien](https://drone.discourse.group/u/anhgien)\
**Post date:** [September 12, 2019, 2:24am UTC](https://drone.discourse.group/t/solved-drone-agent-does-not-retrieve-vault-secret/8738/3 "2019-09-12T02:24:57Z")

</div>

It works correctly, thank you so much 😃