backport of commit 036d7adb61

2 years ago · 62bc6fc71a
parent 0d798a5b57
commit 62bc6fc71a
1 changed files with 3 additions and 0 deletions
--- a/internal/credential/vault/jobs.go
+++ b/internal/credential/vault/jobs.go
@ -604,6 +604,9 @@ func (r *CredentialRenewalJob) renewCred(ctx context.Context, c *privateCredenti
 	if err != nil {
 		return errors.Wrap(ctx, err, op, errors.WithMsg("unable to renew credential"))
 	}
+	if renewedCred == nil {
+		return errors.New(ctx, errors.Unknown, op, "vault returned empty credential")
+	}

 	cred.expiration = time.Duration(renewedCred.LeaseDuration) * time.Second
 	query, values := cred.updateExpirationQuery()