Ability to set vault secret ttl

[srekkas]

Hi,

Can secret have TTL value if annotation exists, like this:
cert-manager-sync.lestak.sh/vault-secret-ttl: 5m

[robertlestak]

what would the ttl control? as far as I understand, the kubernetes auth method accepts jwt and role params, I usually configure the token TTL on the mount and/or role itself

[srekkas]

We use vault injector to get secret from vault and TTL to control how often secret is renewed.
Now we have to set default "Default Lease TTL" on kv secret engine, which secrets inherit.