open-vault/changelog/11969.txt

```release-note:improvement
agent: JWT auto auth now supports a `remove_jwt_after_reading` config option which defaults to true.
```
Agent JWT auto auth `remove_jwt_after_reading` config option (#11969) Add a new config option for Vault Agent's JWT auto auth `remove_jwt_after_reading`, which defaults to true. Can stop Agent from attempting to delete the file, which is useful in k8s where the service account JWT is mounted as a read-only file and so any attempt to delete it generates spammy error logs. When leaving the JWT file in place, the read period for new tokens is 1 minute instead of 500ms to reflect the assumption that there will always be a file there, so finding a file does not provide any signal that it needs to be re-read. Kubernetes has a minimum TTL of 10 minutes for tokens, so a period of 1 minute gives Agent plenty of time to detect new tokens, without leaving it too unresponsive. We may want to add a config option to override these default periods in the future. Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com> 2022-07-25 13:42:09 +00:00			```release-note:improvement
			agent: JWT auto auth now supports a `remove_jwt_after_reading` config option which defaults to true.
			```