This issue also happens on classic charms. Whenever the Vault leader changes to a higher number unit, the lower number one will have a higher priority, so the charm will get the token from the wrong unit.
In summary, the first unit to have a token will be chosen, but whenever we run the 'refresh-secrets', we need to get the information from the Vault leader.
This issue also happens on classic charms. Whenever the Vault leader changes to a higher number unit, the lower number one will have a higher priority, so the charm will get the token from the wrong unit.
In summary, the first unit to have a token will be chosen, but whenever we run the 'refresh-secrets', we need to get the information from the Vault leader.
https:/ /github. com/juju/ charm-helpers/ blob/master/ charmhelpers/ contrib/ openstack/ vaultlocker. py#L44