terraform-provider-vault
terraform-provider-vault copied to clipboard
token: revoke expired tokens
Community Note
- Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
- Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request
Relates #740
When a token is expired, it may still exist in the Vault but with an expire_time set to null. This change aims a not failing, neither panicing (#740), but revoke (when possible) and remove that token from the state.
Release note for CHANGELOG:
Expired Vault tokens might still exist and will have `expire_time` set to nil. In that case, they will be revoked (when possible) and removed (always) from the local state. Expired token will then be recreated by Terraform.
Output from acceptance testing:
$ make testacc TESTARGS='-run=TestAccXXX'
...