Why is -wrap-ttl
is not capped by anything?
One might run
read kv/data/<path> -wrap-ttl=100000h
and vault happily creates a lease for ~11 years
Why is -wrap-ttl
is not capped by anything?
One might run
read kv/data/<path> -wrap-ttl=100000h
and vault happily creates a lease for ~11 years
It’s governed by policy: