How does the application know to use the updated secret within HashiCorp Vault?

[Wolfsrudel]

For Consul as storage backend this could be a solution

Need to use watches for an use key value store consul

Hi @sparshneel, Watches on key-values just use Blocking Queries under the hood. If you’re using the API to directly perform a blocking query, then the API will only return when the KV you’re watching is modified (or if the timeout is reached – in which case you retry the query). Similarly, the Watch will only fire the key’s value is modified. Does this help answer how you can monitor a particular KV for changes?