Merge pull request #8597 from hashicorp/b-vault-revoke-log-line

vault: log once per interval if batching revocation
hashicorp · Aug 6, 2020 · 713b5f5 · 713b5f5
2 parents 46d6f68 + e992785
commit 713b5f5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/nomad/vault.go b/nomad/vault.go
@@ -1303,6 +1303,9 @@ func (v *vaultClient) revokeDaemon() {
 			// Build the list of accessors that need to be revoked while pruning any TTL'd checks
 			toRevoke := len(v.revoking)
 			if toRevoke > v.maxRevokeBatchSize {
+				v.logger.Info("batching tokens to be revoked",
+					"to_revoke", toRevoke, "batch_size", v.maxRevokeBatchSize,
+					"batch_interval", v.revocationIntv)
 				toRevoke = v.maxRevokeBatchSize
 			}
 			revoking := make([]*structs.VaultAccessor, 0, toRevoke)