How to force update the generated Secret when the value is changed in Vault?

[MurzNN]

I created a VaultSecret resource which successfully created the corresponding Secret with the correct value.

But when I update the value in the Vault, the created Secret still contains the previous value.

So, is there any way to force update a specific secret, to follow the changed value?

[MurzNN]

I see the vault.reconciliationTime value that can configure timeout when all secrets will be regenerated.
But I don't want to "spam" my vault every xx minutes to update all passwords. I just want to trigger updating only one specific password, that is recently changed.

[MurzNN]

Maybe some webhook can be configured to trigger the synchronization of a Secret record, or the operator can subscribe to some events?
Vault have an events system for this: https://developer.hashicorp.com/vault/docs/concepts/events

[koschos]

@MurzNN this is already solved in HashiCorp Vault Secrets Operator