Skip to content

feat: Enhance reloader with dynamic secret tracking and version change handling#579

Draft
thiago-boche wants to merge 2 commits intobank-vaults:mainfrom
InfoTrackGlobal:feature/dynamicsecrets
Draft

feat: Enhance reloader with dynamic secret tracking and version change handling#579
thiago-boche wants to merge 2 commits intobank-vaults:mainfrom
InfoTrackGlobal:feature/dynamicsecrets

Conversation

@thiago-boche
Copy link

@thiago-boche thiago-boche commented Feb 16, 2026

Overview

  • Introduced dynamic secret lease management in the Controller, allowing for tracking of secret metadata and restart times.
  • Added methods to handle KV version changes and dynamic secret TTL thresholds for workload restarts.
  • Implemented concurrency-safe access to workload tracking using sync.RWMutex.
  • Updated the Vault client initialization to support dynamic secret renewal and version retrieval.
  • Enhanced tests to cover scenarios for KV version changes, dynamic secret TTL thresholds, and mixed workload decisions.
  • Refactored secret retrieval logic to return detailed secret information, including dynamic lease data.

Notes for reviewer

@github-actions github-actions bot added the size/XL Denotes a PR that changes 1000+ lines label Feb 16, 2026
@thiago-boche thiago-boche force-pushed the feature/dynamicsecrets branch from e898366 to a259f7f Compare February 16, 2026 05:26
…e handling

- Introduced dynamic secret lease management in the Controller, allowing for tracking of secret metadata and restart times.
- Added methods to handle KV version changes and dynamic secret TTL thresholds for workload restarts.
- Implemented concurrency-safe access to workload tracking using sync.RWMutex.
- Updated the Vault client initialization to support dynamic secret renewal and version retrieval.
- Enhanced tests to cover scenarios for KV version changes, dynamic secret TTL thresholds, and mixed workload decisions.
- Refactored secret retrieval logic to return detailed secret information, including dynamic lease data.

Signed-off-by: Thiago Boche <38021019+thiago-boche@users.noreply.github.com>
Signed-off-by: Thiago Boche <38021019+thiago-boche@users.noreply.github.com>
@thiago-boche thiago-boche force-pushed the feature/dynamicsecrets branch from a259f7f to f9d437b Compare February 16, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XL Denotes a PR that changes 1000+ lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant