An application is trying to use a dynamic secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?
Comprehensive and Detailed in Depth
Once a dynamic secret's lease expires, it cannot be renewed or reused; a new secret must be requested. The HashiCorp Vault documentation states: 'A lease must be renewed before it has expired. Once it has expired, it is permanently revoked and a new secret must be requested.' This means that after expiration, the secret is invalidated, and the application must obtain a new secret with a new lease to regain access.
Trying an expired secret (A) is futile as it's revoked. Performing a lease renewal (B) is impossible post-expiration, as the docs note: 'Renewal must occur before the lease expires.' Extending the TTL (D) isn't an option for an expired lease. Thus, C is the correct action.
HashiCorp Vault Documentation - Leases: Lease Renew and Revoke
Lasandra
5 days agoLavonne
10 days agoAlonso
15 days agoMerlyn
20 days agoFlo
2 months agoYvonne
2 months agoArmando
3 months agoDeangelo
3 months agoMiles
3 months agoRobt
4 months ago