I have list of secrets to be added in vault and each secret has its own lease_duration. I am able to write secret but i not getting how to add lease_duration for it. Form my understanding it is like we cannot add lease_duration for individual secrets? correct me if i am wrong. Or do we need to add lease_duration during the NewClinet establishment itself? I using golang/api.
In the KV 1 engine the lease duration is purely advisory; a hint to clients for how often to check for updated values. The global default can be changed with a key named "ttl".
Vault never deletes secrets in the KV engine on its own, even if the "ttl" key is set.
See the TTLs documentation.