hashicorp / hashicorp/vault-secrets-operator

[Feature Request] On demand VSO secret refresh

Open
#680 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
600
Forks
146
Avg merge
3d 8h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
I use VSO to synchronize vault secrets to K8S secrets.
I use static secrets, which are refreshed every T time.
I don't need that, i just want to refresh my secrets in vault and be allowed to tell VSO "ok, now refresh!".
What I do now (in K8S) is delete the pod, but... I mean.... ugly, dangerous, etc.

**Describe the solution you'd like**
Provide a command line option to tell VSO "refresh secrets now, please"

**Describe alternatives you've considered**
As said, delete pod. Ugly

**Additional context**
Related/close friend to https://github.com/hashicorp/vault-secrets-operator/issues/342

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing how VSO refreshes static Vault secrets into Kubernetes Secrets and how its command-line or operator entry points are exposed. Define a safe on-demand refresh trigger without requiring pod deletion, then verify that the requested refresh updates the Kubernetes Secret and preserves the existing periodic refresh behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.