hashicorp / hashicorp/vault-secrets-operator
[Feature Request] On demand VSO secret refresh
- Dominant language
- Go
- Stars
- 600
- Forks
- 146
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 6
Description
**Is your feature request related to a problem? Please describe.**
I use VSO to synchronize vault secrets to K8S secrets.
I use static secrets, which are refreshed every T time.
I don't need that, i just want to refresh my secrets in vault and be allowed to tell VSO "ok, now refresh!".
What I do now (in K8S) is delete the pod, but... I mean.... ugly, dangerous, etc.
**Describe the solution you'd like**
Provide a command line option to tell VSO "refresh secrets now, please"
**Describe alternatives you've considered**
As said, delete pod. Ugly
**Additional context**
Related/close friend to https://github.com/hashicorp/vault-secrets-operator/issues/342
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing how VSO refreshes static Vault secrets into Kubernetes Secrets and how its command-line or operator entry points are exposed. Define a safe on-demand refresh trigger without requiring pod deletion, then verify that the requested refresh updates the Kubernetes Secret and preserves the existing periodic refresh behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100