mirror of
https://github.com/hashicorp/vault.git
synced 2026-06-09 08:55:13 -04:00
agent: Docs for auto-auth and limited-use tokens (#12918)
There are a number of auth methods that support creating tokens with a limited number of uses. However, Vault Agent doesn't track the uses remaining for its auto-auth token, so it may result in flaky permission denied responses if that limit is hit and Vault Agent remains unaware.
This commit is contained in:
parent
f1545590f9
commit
e6840b269c
1 changed files with 6 additions and 0 deletions
|
|
@ -105,6 +105,12 @@ The top level `auto_auth` block has two configuration entries:
|
|||
|
||||
### Configuration (Method)
|
||||
|
||||
~> Auto-auth does not support using tokens with a limited number of uses. Vault
|
||||
Agent does not track the number of uses remaining, and may allow the token to
|
||||
expire before attempting to renew it. For example, if using AppRole auto-auth,
|
||||
you must use 0 (meaning unlimited) as the value for
|
||||
[`token_num_uses`](https://www.vaultproject.io/api-docs/auth/approle#token_num_uses).
|
||||
|
||||
These are common configuration values that live within the `method` block:
|
||||
|
||||
- `type` `(string: required)` - The type of the method to use, e.g. `aws`,
|
||||
|
|
|
|||
Loading…
Reference in a new issue