Skip to content

Renew HashiCorpt Vault token #419

Description

@eiabea

Description

I use the HashiCorp Vault as a secret storage and issued a separate token for the operator to set specific policies to ensure a higher level of security. It is not possible to issue tokens with an infinite TTL (except the root token, which i would like to avoid using), therefore the created token for the operator should be renewed in a fixed time interval (probably once a day)

What I experience

  1. Create a HashiCorp Vault token (e.g. vault create token -policy stakewise)
  2. Use this token to start the operator
  3. Everything works fine
  4. Wait until the token expires
  5. Restart stakewise
  6. Observe a 403 error on startup

What I expect

  1. Create a HashiCorp Vault token (e.g. vault create token -policy stakewise)
  2. Use this token to start the operator
  3. Everything works fine
  4. Token gets renewed every now and then and therefore never gets expired
  5. Restart operator
  6. Connect to the HashiCorp vault without any issue

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions