hashicorp / vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.

Home Page:https://hashicorp.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Disable refresh after for static secrets

padraigmc opened this issue · comments

Is your feature request related to a problem? Please describe.
We are implementing VSO in our blue-green applications, the refreshAfter field in vaultstaticsecret will cause issues when modifying application related secrets.

Describe the solution you'd like
The refreshAfter field has a default value when omitted from the vaultstaticsecret manifest. Please outline if it is possible to disable the refresh function.

Describe alternatives you've considered
Setting a high value would still cause the issue. We are considering versioning our vault spaces but would like to explore if disabling this feature is a possibility.