hashicorp / hashicorp/vault-secrets-operator

Disable refresh after for static secrets

Open
#746 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
600
Forks
146
Avg merge
3d 8h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
We are implementing VSO in our blue-green applications, the refreshAfter field in vaultstaticsecret will cause issues when modifying application related secrets.

**Describe the solution you'd like**
The refreshAfter field has a default value when omitted from the vaultstaticsecret manifest. Please outline if it is possible to disable the refresh function.

**Describe alternatives you've considered**
Setting a high value would still cause the issue. We are considering versioning our vault spaces but would like to explore if disabling this feature is a possibility.

Contributor guide

No contributing guide indexed for this repository

Research direction

No files or tests are named. Start by tracing how refreshAfter is handled for the VaultStaticSecret manifest and read the related operator documentation. Done means there is a supported way to disable refresh without relying on an arbitrarily high value, with the behavior documented and covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
devops, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.