hashicorp / vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
https://hashicorp.com
Other
430 stars 89 forks source link

Disable refresh after for static secrets #746

Open padraigmc opened 1 month ago

padraigmc commented 1 month ago

Is your feature request related to a problem? Please describe. We are implementing VSO in our blue-green applications, the refreshAfter field in vaultstaticsecret will cause issues when modifying application related secrets.

Describe the solution you'd like The refreshAfter field has a default value when omitted from the vaultstaticsecret manifest. Please outline if it is possible to disable the refresh function.

Describe alternatives you've considered Setting a high value would still cause the issue. We are considering versioning our vault spaces but would like to explore if disabling this feature is a possibility.