diff --git a/website/source/docs/job-specification/template.html.md b/website/source/docs/job-specification/template.html.md index c9924a6f5..02372379d 100644 --- a/website/source/docs/job-specification/template.html.md +++ b/website/source/docs/job-specification/template.html.md @@ -94,14 +94,19 @@ README][ct]. Since Nomad v0.6.0, templates can be read as environment variables. prevent a thundering herd problem where all task instances restart at the same time. -- `vault_grace` `(string: "5m")` - Specifies the grace period between lease - renewal and secret re-acquisition. When renewing a secret, if the remaining - lease is less than or equal to the configured grace, the template will request - a new credential. This prevents Vault from revoking the secret at its - expiration and the task having a stale secret. If the grace is set to a value - that is higher than your default TTL or max TTL, the template will always read - a new secret. If the task defines several templates, the `vault_grace` will be - set to the lowest value across all the templates. +- `vault_grace` `(string: "5m")` - Specifies the grace period between lease + renewal and secret re-acquisition. When renewing a secret, if the remaining + lease is less than or equal to the configured grace, the template will request + a new credential. This prevents Vault from revoking the secret at its + expiration and the task having a stale secret. + + If the grace is set to a value that is higher than your default TTL or max + TTL, the template will always read a new secret. **If secrets are being + renewed constantly, increase the `vault_grace`.** + + If the task defines several templates, the `vault_grace` will be set to the + lowest value across all the templates. + ## `template` Examples