-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Description
I use the HashiCorp Vault as a secret storage and issued a separate token for the operator to set specific policies to ensure a higher level of security. It is not possible to issue tokens with an infinite TTL (except the root token, which i would like to avoid using), therefore the created token for the operator should be renewed in a fixed time interval (probably once a day)
What I experience
- Create a HashiCorp Vault token (e.g.
vault create token -policy stakewise) - Use this token to start the operator
- Everything works fine
- Wait until the token expires
- Restart stakewise
- Observe a
403error on startup
What I expect
- Create a HashiCorp Vault token (e.g.
vault create token -policy stakewise) - Use this token to start the operator
- Everything works fine
- Token gets renewed every now and then and therefore never gets expired
- Restart operator
- Connect to the HashiCorp vault without any issue
stiffla and mksh
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request