-
Notifications
You must be signed in to change notification settings - Fork 4.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Documentation for Self Healing Auto Auth Proxy and Agent #26324
Conversation
CI Results: |
Build Results: |
allowed. If renewal fails, the token has been revoked, or the token has exceeded the maximum number of uses, | ||
it will attempt to reauthenticate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
allowed. If renewal fails, the token has been revoked, or the token has exceeded the maximum number of uses, | |
it will attempt to reauthenticate. | |
allowed. If renewal fails, the token has been revoked, the token has exceeded | |
the maximum number of uses, or is invalid for any other reason, it will attempt to reauthenticate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The 'any other reason' was the initial onus for this request, so I thought I'd call it out explicitly!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I just want to make sure that they don't confuse "invalid for any other reason" to be invalid because of invalid policy access.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, you're right: what about "invalid for any reason other than access control"?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved, with a small additional suggestion
Documentation for how Auto Auth will self-heal for Agent and Proxy.
RFC: https://hermes.hashicorp.services/document/1yTtWJEvyoYLPkYRQ3lxs6dHmqAVyC177BMEBEXuu8fE?draft=false