hashicorp / hashicorp/consul-template

Vault can not re-render template when configmap updated in K8s

Open
#1,401 2 comments 5 reactions 0 assignees View on GitHub
bug vault
Dominant language
Go
Stars
4.8k
Forks
801
Avg merge
4h 5m
Merged PRs (30d)
6

Description

This is a reference ticket to https://github.com/hashicorp/vault/issues/8620

### Consul Template version

Vault 1.2 is being used

### Configuration

```hcl
vault-agent-config.hcl: |2

pid_file = "/home/vault/pidfile"
log_level = "Debug"

auto_auth {
method "kubernetes" {
mount_path = "auth/kubernetes/shared/qa/"
config = {
role = "shared-qa-qa-paas-sre-default"
}
}

sink "file" {
config = {
path = "/home/vault/.vault-token"
}
}
}
template {
destination = "/etc/secrets/settings.json"
source = "/etc/template-files/settings.json"
}

```

### Expected Behavior
updated configmap template can be re-rendered by vault

### Debug output

![image](https://user-images.githubusercontent.com/61531/88500942-98c55980-cffc-11ea-8f67-0d582d4883ea.png)

however, highlighted line is not removed.

![image](https://user-images.githubusercontent.com/61531/88500956-9ebb3a80-cffc-11ea-9306-9c000062bd20.png)

Contributor guide

Open the contributing guide

Research direction

Start with the referenced Vault issue and reproduce the behavior using the shown vault-agent-config.hcl template configuration, including the settings.json source and destination. Compare the rendered output before and after the Kubernetes ConfigMap update; done means the updated template is re-rendered and the highlighted stale line is removed.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.