VAULT-28518 : added force-delete flag in secret sync (#10990) (#11180)

* added force-delete flag in secret sync

* added tests for force-delete destination flag

* added changelog

* updated test

* updated description

* updated force-delete flag

* updated changelog

* updated tests for force_delete

* Update changelog/_10990.txt



---------

Co-authored-by: suraj-simha <suraj.s@hashicorp.com>
Co-authored-by: Suraj-S <suraj.s4@ibm.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
This commit is contained in:
Vault Automation 2025-12-05 02:12:22 -05:00 committed by GitHub
parent 6c6777ef5c
commit cfc130b40b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

5
changelog/_10990.txt Normal file
View file

@ -0,0 +1,5 @@
```release-note:improvement
secrets-sync (enterprise): Added support for a boolean force_delete flag (default: false).
When set to true, this flag allows deletion of a destination even if its associations cannot be unsynced.
This option should be used only as a last-resort deletion mechanism, as any secrets already synced to the external provider will remain orphaned and require manual cleanup.
```