hashicorp / hashicorp/consul-template
Vault support force_default_lease_duration
- Dominant language
- Go
- Stars
- 4.8k
- Forks
- 801
- Avg merge
- 4h 5m
- Merged PRs (30d)
- 6
Description
### Description
- Vault support parameter `force_default_lease_duration`
### Motivation
- Vault agent injector doesn't react to manual secret rotation. Until there is an official way, we want it to check more often. No change to actual secret on vault server side
- This change can help simplifying rotation testing
### Expected behavior
```hcl
vault {
force_default_lease_duration = true
default_lease_duration = "60s"
}
```
https://github.com/hashicorp/consul-template/blob/08826810124703e7593e825a772e92f14edc77d4/dependency/vault_common.go#L156-L158
Change this FROM
```go
if base <= 0 {
```
TO
```go
if base <= 0 || force {
```
### References
Are there any other GitHub issues (open or closed) that should
be linked here? For example:
- https://github.com/hashicorp/vault-k8s/issues/614
- [x] Im able to contribute
Contributor guide
Assessment
This issue has not been assessed yet.