vault
vault copied to clipboard
agent/auto-auth: add exit_on_err configurable
When Agent's auto-auth encounters a problem it will retry indefinitely, regardless of the error. This configurable allows users to specify if Vault should exit on auto-auth error, similar to exit_on_err
in the caching engine: https://www.vaultproject.io/docs/agent/caching#exit_on_err.
At the moment this will exit on any error, but I'm open to only exiting on some errors (such as 400 errors).
What's the motivation/use case here? And can you clarify in the docs that this applies not just to initial auth, but also any re-auth that occurs once renewal is no longer possible, either due to a renewal failure or the token TTL being reached?
What's the motivation/use case here? And can you clarify in the docs that this applies not just to initial auth, but also any re-auth that occurs once renewal is no longer possible, either due to a renewal failure or the token TTL being reached?
The motivation here is that auto-auth will continually try to auth indefinitely, even if there's a misconfiguration (role doesn't exist) or the Vault server isn't online. I will update the doc with more information as well, good call out.
@ncabatoff Updated the doc. Thanks for the suggestion!