vault: implement authentication token renewal

minio / kes

Key Managament Server for Object Storage and more

https://min.io/docs/kes/concepts/

GNU Affero General Public License v3.0

456 stars 94 forks source link

Closed aead closed 7 months ago

aead commented 7 months ago

This commit re-implements token renewal after it got removed by 13cee22.

Now, the token renewal process works as following:

If the token is about to expire (max. 10s before expiry) we try to renew the token if renewable.
If the renewal fails, or the token is not renewable, KES tries to re-authenticate with the configured auth method.
If re-authenticating also fails, we retry after 3s.

harshavardhana commented 7 months ago

We need a release here @aead ?