Reading consul/creds/some-app results in a new consul ACL every time.

[jeremyjjbrown]

I have an issue where reading consul/creds/some-app results in a new Consul ACL every time. Is there a smart way to reread a Consul policy without creating lots and lots of copies?

Should I be setting a short ttl on the creds I generate, and counting on vault to do the clean up if the ACLs are not renewed?

I have set the lease = "1h" but the lease duration comes back as "lease_duration 2592000" (30 days?). I feel the docs are unclear on this part.

I'm using vault 0.5.2 I'll try 0.5.3 soon to see if the output is clearer.

[jeremyjjbrown]

Nevermind, once I get my lease configured they are garbage collected. Sorry for the noise.