add property

gestalt/vault.py

@@ -41,18 +41,28 @@ def __init__(
         self.dynamic_token_queue: Queue[Tuple[str, str, str]] = Queue()
         self.kubes_token_queue: Queue[Tuple[str, str, str]] = Queue()
 
-        self.vault_client = hvac.Client(url=url,
-                                        token=token,
-                                        cert=cert,
-                                        verify=verify)
+        self._vault_client: Optional[hvac.Client] = None
         self._secret_expiry_times: Dict[str, datetime] = dict()
         self._secret_values: Dict[str, Union[str, int, float, bool,
                                              List[Any]]] = dict()
         self._is_connected: bool = False
         self._role: Optional[str] = role
         self._jwt: Optional[str] = jwt
+        self._url: Optional[str] = url
+        self._token: Optional[str] = token
+        self._verify: Optional[bool] = verify
+
         self.delay = delay
         self.tries = tries
+
+    @property
+    def vault_client(self) -> hvac.Client:
+        if self._vault_client is None:
+            self._vault_client = hvac.Client(url=self._url,
+                                             token=self._token,
+                                             cert=self._cert,
+                                             verify=self._verify)
+        return self._vault_client
 
     def connect(self) -> None:
         try:

tests/test_gestalt.py

@@ -562,7 +562,7 @@ def test_vault_lazy_connect(mock_vault_workers, mock_vault_k8s_auth):
         assert not v._is_connected
         v.get("foo", "foo", ".foo")
         assert v._is_connected
-        mock_client().sys.renew_lease.assert_called()
+        mock_client().auth.token.lookup_self.assert_called()
 
 def test_vault_worker_dynamic(mock_vault_workers, mock_vault_k8s_auth):
     mock_dynamic_renew, mock_k8s_renew = mock_vault_workers