hashicorp / hashicorp/consul-template

Vault support force_default_lease_duration

Open
#2,005 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
4.8k
Forks
801
Avg merge
4h 5m
Merged PRs (30d)
6

Description

### Description
- Vault support parameter `force_default_lease_duration`

### Motivation
- Vault agent injector doesn't react to manual secret rotation. Until there is an official way, we want it to check more often. No change to actual secret on vault server side
- This change can help simplifying rotation testing

### Expected behavior
```hcl
vault {
force_default_lease_duration = true
default_lease_duration = "60s"
}
```

https://github.com/hashicorp/consul-template/blob/08826810124703e7593e825a772e92f14edc77d4/dependency/vault_common.go#L156-L158

Change this FROM
```go
if base <= 0 {
```
TO
```go
if base <= 0 || force {
```

### References

Are there any other GitHub issues (open or closed) that should
be linked here? For example:
- https://github.com/hashicorp/vault-k8s/issues/614

- [x] Im able to contribute

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.