Fix for harness#2541

MarieReRe · Dec 6, 2018 · 6d144de · 6d144de
1 parent 768ed78
commit 6d144de
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/plugins/secrets/vault/vault.go b/plugins/secrets/vault/vault.go
@@ -206,6 +206,14 @@ func (v *vault) renewLoop() {
 
 			logrus.Debugf("vault: refreshing token: increment %v", v.ttl)
 			_, err := v.client.Auth().Token().RenewSelf(incr)
+
+			// kubernetes tokens have a max age of 32 days. If the
+			// token cannot be refreshed we may need to generate a
+			// new token.
+			if err != nil && v.auth == "kubernetes" {
+				err = v.initKubernetes()
+			}
+
 			if err != nil {
 				logrus.Errorf("vault: refreshing token failed: %s", err)
 			} else {