How often is the cache refreshed?

[firestonem]

Hi. I was reading this issue about concurrency and large numbers of secrets causing delays in reconciliation. I'm using this operator to manage a few thousand secrets coming from Vault, many of which are set to refresh every hour.

My question is: when the flag --enable-secrets-caching=true is set, how often is the cache invalidated for each secret created? If I change a secret and wait the requisite hour for it to be updated, will it pull the updated value from Vault in time?

I have been unable to find any documentation around the cache's behavior. If it exists, please point me in its direction. Thanks in advance

[firestonem]

Asked and answered in the Slack channel. Trying my best to summarize:

The secret state in cache reflects the live secret and is stored in memory to reduce the number of k8s API operations. It does not affect how often the operator checks the source of the secret. So there's no worry about stale secrets continuing to exist without updates.