|
1 | 1 | --- |
2 | 2 | layout: docs |
3 | 3 | page_title: Kubernetes - Vault Agent Persistent Cache |
4 | | -sidebar_title: Kubernetes |
5 | 4 | description: Kubernetes Persistent Cache for Vault Agent Caching |
6 | 5 | --- |
7 | 6 |
|
8 | 7 | # Vault Agent Kubernetes Persistent Cache |
9 | 8 |
|
10 | | -When `kubernetes` is configured for the persistent cache type, Vault Agent will optimize the |
11 | | -persistent cache specifically for Kubernetes. This type of persistent cache requires a Kubernetes |
12 | | -service account token. The service account token is used during encryption and decryption of the |
| 9 | +When `kubernetes` is configured for the persistent cache type, Vault Agent will optimize the |
| 10 | +persistent cache specifically for Kubernetes. This type of persistent cache requires a Kubernetes |
| 11 | +service account token. The service account token is used during encryption and decryption of the |
13 | 12 | persistent cache as an additional integrity check. |
14 | 13 |
|
15 | | -The Vault Agent persistent cache file in Kubernetes should only be used for handing off Vault tokens |
16 | | -and leases between initialization and sidecar Vault Agent containers. This cache file should be shared |
| 14 | +The Vault Agent persistent cache file in Kubernetes should only be used for handing off Vault tokens |
| 15 | +and leases between initialization and sidecar Vault Agent containers. This cache file should be shared |
17 | 16 | using a memory volume between the Vault Agent containers. |
18 | 17 |
|
19 | | -If the Vault Agent Injector for Kubernetes is being used, the persistent cache is automatically configured |
| 18 | +If the Vault Agent Injector for Kubernetes is being used, the persistent cache is automatically configured |
20 | 19 | and used if the annotation [`vault.hashicorp.com/agent-cache-enable: true`](/docs/platform/k8s/injector/annotations#vault-hashicorp-com-agent-cache-enable) is set. |
21 | 20 |
|
22 | 21 | ## Configuration |
23 | 22 |
|
24 | | -- `service_account_token_file` `(string: optional)` - When type is set to `kubernetes`, |
25 | | - this configures the path on disk where the Kubernetes service account token can be found. |
| 23 | +- `service_account_token_file` `(string: optional)` - When type is set to `kubernetes`, |
| 24 | + this configures the path on disk where the Kubernetes service account token can be found. |
26 | 25 | Defaults to `/var/run/secrets/kubernetes.io/serviceaccount/token`. |
0 commit comments