Skip to content

Renew HashiCorpt Vault token #419

@eiabea

Description

@eiabea

Description

I use the HashiCorp Vault as a secret storage and issued a separate token for the operator to set specific policies to ensure a higher level of security. It is not possible to issue tokens with an infinite TTL (except the root token, which i would like to avoid using), therefore the created token for the operator should be renewed in a fixed time interval (probably once a day)

What I experience

  1. Create a HashiCorp Vault token (e.g. vault create token -policy stakewise)
  2. Use this token to start the operator
  3. Everything works fine
  4. Wait until the token expires
  5. Restart stakewise
  6. Observe a 403 error on startup

What I expect

  1. Create a HashiCorp Vault token (e.g. vault create token -policy stakewise)
  2. Use this token to start the operator
  3. Everything works fine
  4. Token gets renewed every now and then and therefore never gets expired
  5. Restart operator
  6. Connect to the HashiCorp vault without any issue

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions