vault-csi-provider
vault-csi-provider copied to clipboard
RabbitMQ secrets engine generates a new credential every two minutes
I have enabled and configured the RabbitMQ secrets engine to generate credentials for RabbitMQ as per this documentation: https://developer.hashicorp.com/vault/docs/secrets/rabbitmq
When consuming the path rabbitmq/creds/my-role from a SecretProviderClass, it works properly to generate the credentials on the fly. However, upon reaching the default rotation pool interval of 2 minutes configured in the Secrets Store CSI Driver, it will generate yet another credential.
You can see in the screenshot below that in 10~12 minutes it has generated 5 credentials. Because I have Reloader listening to the secrets, it also restarted the pod every 2 minutes.
It would be great if Vault CSI Driver would inspect the generated credentials for its validity before generating a new one.