How does the application know to use the updated secret within HashiCorp Vault?

[evanniedojadlo]

We have a .NET application and are working towards a config provider. The problem is that I don’t understand how the application is going to use a static KV/KV2 secret that was manually updated. I was thinking polling might address this but any tips are appreciated.

[Wolfsrudel]

Just to keep it in mind:

Support change notifications

Are you using Consul as storage backend?

Is this a duplicate to your former question? How does the application integrated with hashicorp pull the latest static secret that was updated in vault?

[Wolfsrudel]

For Consul as storage backend this could be a solution

Need to use watches for an use key value store consul

Hi @sparshneel, Watches on key-values just use Blocking Queries under the hood. If you’re using the API to directly perform a blocking query, then the API will only return when the KV you’re watching is modified (or if the timeout is reached – in which case you retry the query). Similarly, the Watch will only fire the key’s value is modified. Does this help answer how you can monitor a particular KV for changes?