hashicorp / hashicorp/consul-template
Vault can not re-render template when configmap updated in K8s
- Dominant language
- Go
- Stars
- 4.8k
- Forks
- 801
- Avg merge
- 4h 5m
- Merged PRs (30d)
- 6
Description
This is a reference ticket to https://github.com/hashicorp/vault/issues/8620
### Consul Template version
Vault 1.2 is being used
### Configuration
```hcl
vault-agent-config.hcl: |2
pid_file = "/home/vault/pidfile"
log_level = "Debug"
auto_auth {
method "kubernetes" {
mount_path = "auth/kubernetes/shared/qa/"
config = {
role = "shared-qa-qa-paas-sre-default"
}
}
sink "file" {
config = {
path = "/home/vault/.vault-token"
}
}
}
template {
destination = "/etc/secrets/settings.json"
source = "/etc/template-files/settings.json"
}
```
### Expected Behavior
updated configmap template can be re-rendered by vault
### Debug output

however, highlighted line is not removed.

Contributor guide
Research direction
Start with the referenced Vault issue and reproduce the behavior using the shown vault-agent-config.hcl template configuration, including the settings.json source and destination. Compare the rendered output before and after the Kubernetes ConfigMap update; done means the updated template is re-rendered and the highlighted stale line is removed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100