search

hashicorp / vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
https://hashicorp.com
Other
436 stars 89 forks source link

Client: skip LifetimeWatcher validation for non-renewable auth tokens #722

Closed benashz closed 2 months ago

benashz commented 2 months ago

Previously calling Validate() on a defaultClient that was authenticated using a non-renewable Vault token, would result in an error when the Client was being fetched from the CachingClientFactory. The defaultClient does not start a LifetimeWatcher in this case, so any related validation checks are invalid. This PR corrects that.