look for an existing lease and renew that

[Joseph-Irving]

So this will write out the full secret with lease details to a file as well as generating the credentials. When a new vault-creds starts up it will check for this before creating brand new creds. This means you could generate creds in an init container and pass them to the sidecar