Wrapped secret max ttl

Why is -wrap-ttl is not capped by anything?

One might run

read kv/data/<path> -wrap-ttl=100000h

and vault happily creates a lease for ~11 years

It’s governed by policy:

1 Like