consul-terraform-sync
consul-terraform-sync copied to clipboard
Monitor Vault for updated values used for configuration
Description
CTS can use Vault to query sensitive information for CTS configuration and provider configuration with the template function {{ with secret }}
(docs). An enhancement to the feature would extend CTS to also monitor Vault for updates and refresh configuration with the latest values.
Use Cases
Rolling sensitive information on Vault: Consul ACL token, Consul enterprise license, provider credentials
Alternative Solutions
Manual restart of each CTS instance to reload any configuration change.