Vault can not re-render template when configmap updated in K8s

[woosley]

This is a reference ticket to https://github.com/hashicorp/vault/issues/8620

Consul Template version

Vault 1.2 is being used

Configuration

vault-agent-config.hcl: |2

    pid_file = "/home/vault/pidfile"
    log_level = "Debug"

    auto_auth {
        method "kubernetes" {
            mount_path = "auth/kubernetes/shared/qa/"
            config = {
                role = "shared-qa-qa-paas-sre-default"
            }
        }

        sink "file" {
            config = {
                path = "/home/vault/.vault-token"
            }
        }
    }
    template {
        destination = "/etc/secrets/settings.json"
        source = "/etc/template-files/settings.json"
    }

Expected Behavior

updated configmap template can be re-rendered by vault

Debug output

however, highlighted line is not removed.

[eikenb]

Thanks @woosley for reporting this issue.

I'm currently in the process of rewriting the core of consul-template as a proper library that should make this easier to address as it will give more control over the flow to the application vs. the current all-in-one implementation (consul-template was an application that got hacked/converted into a library after the fact and it has issues).

[aeb-dev]

Is there any progress on this?