hard20 pts · first answer countsvaultsecrets-managementtroubleshooting

App fails every hour on DB auth

An app reads dynamic database credentials from Vault at startup. Every hour or so it starts failing with "password authentication failed" until restarted. The role has default_ttl 1h and max_ttl 24h. What is happening and what is the best fix?

A.Vault rotates the database root password every hour; turn off root rotation on the database mount.B.The lease expires and Vault revokes the user; renew it and re-fetch credentials, for example with Vault Agent.C.The database server clock has drifted from the Vault server; sync both with NTP and switch to UTC.D.Set default_ttl to 0 on the role, so the generated database credentials will never expire again.

Discussion 0

Join free to post in the discussion.

App fails every hour on DB auth

Discussion 0

Related questions