Uses expiry time to renew JWT svid.

Signed-off-by: JU4N98 <juanpablocabana2@gmail.com>
spiffe · Oct 24, 2023 · fa6a696 · fa6a696
1 parent 1db3334
commit fa6a696
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/sidecar/sidecar.go b/pkg/sidecar/sidecar.go
@@ -270,6 +270,7 @@ func (s *Sidecar) updateJWTSVID(ctx context.Context, options ...workloadapi.Clie
 			s.config.Log.Infof("Updating JWT SVID")
 			jwtSVID, err := s.fetchJWTSVID(options...)
 			if err != nil {
+				time.Sleep(time.Second)
 				continue
 			}
 
@@ -278,8 +279,7 @@ func (s *Sidecar) updateJWTSVID(ctx context.Context, options ...workloadapi.Clie
 			s.writeJSON(certs)
 
 			s.config.Log.Infof("JWT SVID updated")
-
-			time.Sleep(time.Minute)
+			time.Sleep(time.Until(jwtSVID.Expiry)/2 + 1*time.Second)
 		}
 	}
 }