Skip to content

Conversation

@hashiblaum
Copy link
Member

Adds a note to the CSI Provider doc. This informs user of unexpected behavior if the Vault Agent container within the CSI Provider pod is stopped at any point.

Vault Agent manages the leases for secrets consumed by pods using the CSI Provider to read secrets from Vault.

@hashiblaum hashiblaum requested review from a team as code owners May 8, 2025 17:40
@hashiblaum hashiblaum requested review from anwittin and scellef May 8, 2025 17:40
@github-actions github-actions bot added the hashicorp-contributed-pr If the PR is HashiCorp (i.e. not-community) contributed label May 8, 2025
@hashiblaum hashiblaum added this to the 1.20.0-rc milestone May 8, 2025
@github-actions
Copy link

github-actions bot commented May 8, 2025

CI Results:
All Go tests succeeded! ✅

@hashiblaum hashiblaum added the docs label May 8, 2025
@github-actions
Copy link

github-actions bot commented May 8, 2025

Build Results:
All builds succeeded! ✅

hashiblaum and others added 2 commits May 12, 2025 10:48
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Copy link

@stevealmyHC stevealmyHC left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might be more educational to recap:

  • Vault Agent does not track state (including tokens) across restarts
  • ... therefore, is unable to refresh tokens and renew leases created by previous Agent instantiations
  • ... and Vault eventually revokes those leases on token expiration

Vault is the entity that revokes this lease, not Agent

@schavis schavis merged commit f74fec8 into main Jul 15, 2025
39 checks passed
@schavis schavis deleted the VAULT-34107/update-csi-provider-doc branch July 15, 2025 00:43
Erfankam pushed a commit to Erfankam/vault that referenced this pull request Sep 1, 2025
* add note for csi-provider

* remove fully qualified link

* Update website/content/docs/deploy/kubernetes/csi/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

* Update website/content/docs/deploy/kubernetes/csi/index.mdx

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>

---------

Co-authored-by: Sarah Chavis <62406755+schavis@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs hashicorp-contributed-pr If the PR is HashiCorp (i.e. not-community) contributed pr/no-changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants