If consul-template is configured to use vault token with a renew configuration, and the vault token renew fails once (for example the server is temporarily unreachable), it doesn't retry like intended.
2025-05-08T11:37:57.417Z [WARN] vault.token: failed to renew: context deadline exceeded
2025-05-08T11:37:57.417Z [WARN] vault.token: renewer done (maybe the lease expired)
After that it hangs.
Problem comes from the line:
The channel that is being written isn't buffered and there is no one reading from that channel for the special vault token watcher:
|
vaultTokenWatcher *watch.Watcher |
If consul-template is configured to use vault token with a renew configuration, and the vault token renew fails once (for example the server is temporarily unreachable), it doesn't retry like intended.
After that it hangs.
Problem comes from the line:
consul-template/watch/view.go
Line 165 in 1adb94d
The channel that is being written isn't buffered and there is no one reading from that channel for the special vault token watcher:
consul-template/manager/runner.go
Line 85 in 1adb94d