Merge pull request #1733 from hashicorp/f-vault-renew-root

Renew root tokens where applicable
2016-09-21 17:00:09 -07:00 · 2016-09-21 17:00:09 -07:00 · d810e1c432
parent 22f150b17a f99d84d2c3
commit d810e1c432
1 changed files with 1 additions and 1 deletions
--- a/nomad/vault.go
+++ b/nomad/vault.go
@ -331,7 +331,7 @@ OUTER:
 	v.client.SetWrappingLookupFunc(v.getWrappingFn())

 	// If we are given a non-root token, start renewing it
-	if v.tokenData.Root {
+	if v.tokenData.Root && v.tokenData.CreationTTL == 0 {
 		v.logger.Printf("[DEBUG] vault: not renewing token as it is root")
 	} else {
 		v.logger.Printf("[DEBUG] vault: token lease duration is %v",