From f181f1a07a9d9bfefbaeaf3793bdcdab040e5751 Mon Sep 17 00:00:00 2001
From: Mahmood Ali <mahmood@hashicorp.com>
Date: Tue, 30 Oct 2018 12:38:32 -0400
Subject: [PATCH] Wrap Vault API api errors for easing debugging

---
 nomad/vault.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nomad/vault.go b/nomad/vault.go
index b159f0611..5f21081df 100644
--- a/nomad/vault.go
+++ b/nomad/vault.go
@@ -560,7 +560,7 @@ func (v *vaultClient) renew() error {
 	// Attempt to renew the token
 	secret, err := v.auth.RenewSelf(v.tokenData.CreationTTL)
 	if err != nil {
-		return err
+		return fmt.Errorf("failed to renew the vault token: %v", err)
 	}
 	if secret == nil {
 		// It's possible for RenewSelf to return (nil, nil) if the
@@ -914,6 +914,7 @@ func (v *vaultClient) CreateToken(ctx context.Context, a *structs.Allocation, ta
 
 	// Determine whether it is unrecoverable
 	if err != nil {
+		err = fmt.Errorf("failed to create an alloc vault token: %v", err)
 		if structs.VaultUnrecoverableError.MatchString(err.Error()) {
 			return secret, err
 		}