There are some users that want to renew the token. Vault allow this with the "default" policy.
My idea was to block this feature, but hey, who am I to block the user's desires?
But I think that it's better to limit this in some way... Maybe add this feature only for users with "admin" policy, or to everybody but the button only will appear when the TTL is less than 15 minutes.
There are some users that want to renew the token. Vault allow this with the "default" policy.
My idea was to block this feature, but hey, who am I to block the user's desires?
But I think that it's better to limit this in some way... Maybe add this feature only for users with "admin" policy, or to everybody but the button only will appear when the TTL is less than 15 minutes.