Description
I use the HashiCorp Vault as a secret storage and issued a separate token for the operator to set specific policies to ensure a higher level of security. It is not possible to issue tokens with an infinite TTL (except the root token, which i would like to avoid using), therefore the created token for the operator should be renewed in a fixed time interval (probably once a day)
What I experience
- Create a HashiCorp Vault token (e.g.
vault create token -policy stakewise)
- Use this token to start the operator
- Everything works fine
- Wait until the token expires
- Restart stakewise
- Observe a
403 error on startup
What I expect
- Create a HashiCorp Vault token (e.g.
vault create token -policy stakewise)
- Use this token to start the operator
- Everything works fine
- Token gets renewed every now and then and therefore never gets expired
- Restart operator
- Connect to the HashiCorp vault without any issue
Description
I use the HashiCorp Vault as a secret storage and issued a separate token for the operator to set specific policies to ensure a higher level of security. It is not possible to issue tokens with an infinite TTL (except the root token, which i would like to avoid using), therefore the created token for the operator should be renewed in a fixed time interval (probably once a day)
What I experience
vault create token -policy stakewise)403error on startupWhat I expect
vault create token -policy stakewise)