tdsacilowski dac99be29d
Agent JWT auto auth remove_jwt_after_reading config option (#11969)
Add a new config option for Vault Agent's JWT auto auth
`remove_jwt_after_reading`, which defaults to true. Can stop
Agent from attempting to delete the file, which is useful in k8s
where the service account JWT is mounted as a read-only file
and so any attempt to delete it generates spammy error logs.

When leaving the JWT file in place, the read period for new
tokens is 1 minute instead of 500ms to reflect the assumption
that there will always be a file there, so finding a file does not
provide any signal that it needs to be re-read. Kubernetes
has a minimum TTL of 10 minutes for tokens, so a period of
1 minute gives Agent plenty of time to detect new tokens,
without leaving it too unresponsive. We may want to add a
config option to override these default periods in the future.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
2022-07-25 07:42:09 -06:00
..
2022-01-27 10:06:34 -08:00
2019-03-25 10:56:04 -07:00
2017-10-24 09:28:06 -04:00
2022-02-18 08:50:05 -08:00
2019-02-14 11:54:47 -08:00
2022-04-19 14:28:08 -04:00
2022-02-15 10:43:49 -08:00
2017-10-24 09:30:47 -04:00
2021-10-26 10:52:29 -06:00
2020-03-17 09:46:44 -04:00
2017-10-24 09:30:48 -04:00
2017-10-24 09:39:34 -04:00
2022-01-27 10:06:34 -08:00
2018-11-06 17:21:24 -08:00
2017-10-24 09:30:48 -04:00
2022-02-18 08:50:05 -08:00
2017-10-24 09:39:34 -04:00
2018-02-12 18:12:16 -05:00
2017-10-24 09:30:47 -04:00
2022-04-19 14:28:08 -04:00