From ef5ac62544740b4458296d3933459d1b93a977ca Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 17 Jan 2026 03:09:33 -0300
Subject: [PATCH] vault: make retry helper resilient

---
 services/vault/scripts/vault_k8s_auth_configure.sh | 2 ++
 services/vault/scripts/vault_oidc_configure.sh     | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index bbb5e3a..7566866 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -5,8 +5,10 @@ log() { echo "[vault-k8s-auth] $*"; }
 
 vault_cmd() {
   for attempt in 1 2 3 4 5 6; do
+    set +e
     output="$(vault "$@" 2>&1)"
     status=$?
+    set -e
     if [ "${status}" -eq 0 ]; then
       printf '%s' "${output}"
       return 0
diff --git a/services/vault/scripts/vault_oidc_configure.sh b/services/vault/scripts/vault_oidc_configure.sh
index d703ed5..70da3b7 100644
--- a/services/vault/scripts/vault_oidc_configure.sh
+++ b/services/vault/scripts/vault_oidc_configure.sh
@@ -5,8 +5,10 @@ log() { echo "[vault-oidc] $*"; }
 
 vault_cmd() {
   for attempt in 1 2 3 4 5 6; do
+    set +e
     output="$(vault "$@" 2>&1)"
     status=$?
+    set -e
     if [ "${status}" -eq 0 ]; then
       printf '%s' "${output}"
       return 0