hashicorp / hashicorp/consul-template

How to change default lease_duration value in vault agent config file

Open
#1,485 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
Go
Stars
4.8k
Forks
801
Avg merge
4h 5m
Merged PRs (30d)
6

Description

Hi i am trying to change the default duration vault agent rechecking a Vault secret value for every 1 minute
i tried using below configuration but still vault agent rechecking a Vault secret value for 5 min

what is the configuration need to be set , so that vault agent checking a Vault secret value for every 1 minute ?

vault{
address="http://127.0.0.1:8200"
}
pid_file = "/tmp/pidfile"

auto_auth {
method "approle" {
mount_path = "auth/approle-iot-concord"
namespace = "iot"
default_lease_duration = "60s"
config = {
role_id_file_path = "/tmp/roleid"
secret_id_file_path = "/tmp/secretid"
remove_secret_id_file_after_reading = false
}
}
sink "file" {
config = {
path = "/tmp/vault_token"
}
}
}

template {
source = "/tmp/template.ctmpl"
destination = "/tmp/render.txt"
}

template {
source = "/tmp/wcnp.ctmpl"
destination = "/tmp/wcnp.txt"
}

Contributor guide

Open the contributing guide

Research direction

Start with the auto_auth method configuration and the default_lease_duration setting shown in the issue. Check the existing Vault Agent configuration guidance and determine whether a 60-second recheck is supported; done means documenting the correct configuration or limitation clearly.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
devops
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.