Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RabbitMQ secrets engine generates a new credential every two minutes #297

Open
renan opened this issue Aug 1, 2024 · 0 comments
Open

RabbitMQ secrets engine generates a new credential every two minutes #297

renan opened this issue Aug 1, 2024 · 0 comments

Comments

@renan
Copy link

renan commented Aug 1, 2024

I have enabled and configured the RabbitMQ secrets engine to generate credentials for RabbitMQ as per this documentation: https://developer.hashicorp.com/vault/docs/secrets/rabbitmq

When consuming the path rabbitmq/creds/my-role from a SecretProviderClass, it works properly to generate the credentials on the fly. However, upon reaching the default rotation pool interval of 2 minutes configured in the Secrets Store CSI Driver, it will generate yet another credential.

You can see in the screenshot below that in 10~12 minutes it has generated 5 credentials. Because I have Reloader listening to the secrets, it also restarted the pod every 2 minutes.

Screenshot 2024-08-01 at 12 00 18

It would be great if Vault CSI Driver would inspect the generated credentials for its validity before generating a new one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant