Vault support force_default_lease_duration

[phuhung273]

Description

• Vault support parameter force_default_lease_duration

Motivation

• Vault agent injector doesn't react to manual secret rotation. Until there is an official way, we want it to check more often. No change to actual secret on vault server side
• This change can help simplifying rotation testing

Expected behavior

vault {
    force_default_lease_duration = true
    default_lease_duration = "60s"
}

consul-template/dependency/vault_common.go

Lines 156 to 158 in 0882681

	if base <= 0 {
	base = int(VaultDefaultLeaseDuration.Seconds())
	}

Change this FROM

if base <= 0 {

TO

if base <= 0 || force {

References

Are there any other GitHub issues (open or closed) that should
be linked here? For example:

• Sidecar agent does not handle manually rotated static database secret vault-k8s#614

• Im able to contribute