secret-manager
secret-manager copied to clipboard
Add support for secret renewal
Add field to ExternalSecret to control refresh period rather than relying on occasional controller resyncs.
Current design is to add the field refreshInterval
of type time.Duration.
Hi @mcavoyk , is the current controller still does not support reconciling the secrets if updated in the backend ? any workarounds for that other than recreating the externalSecret resource ?
Hi @mcavoyk , is the current controller still does not support reconciling the secrets if updated in the backend ? any workarounds for that other than recreating the externalSecret resource ?
This field is not currently supported, but all ExternalSecrets will be refreshed every controller resync period (~10 hours). If more immediate refresh is needed, right now the way to do that would be edit an annotation the ES which will cause the secret-manager to reconcile the secret and refresh the contents.