Manually rotate static role credentials

The LDAP secrets plugin can rotate LDAP credential for static roles configured the plugin.

Assumptions

You have set up an ldap plugin.
You have permission to update LDAP credentials in Vault.

Use vault write with the /{mount_path}/rotate-role/{role_name} path to rotate the credential password:

$ vault write -f <mount_path>/rotate-role/<role_name>

For example:

$ vault write -f devcreds/rotate-role/hashicorp

Make a POST call to /{mount_path}/rotate-role/{role_name} to rotate the credential password:

$ curl                                                \
  --request POST                                      \
  --header    "X-Vault-Token: ${VAULT_TOKEN}"         \
  --namespace "X-Vault-Namespace: ${VAULT_NAMESPACE}" \
  ${VAULT_ADDR}/v1/<mount_path>/rotate-role/<role_name>

For example:

$ curl                                                \
  --request POST                                      \
  --header    "X-Vault-Token: ${VAULT_TOKEN}"         \
  --namespace "X-Vault-Namespace: ${VAULT_NAMESPACE}" \
  ${VAULT_ADDR}/v1/devcreds/rotate-role/hashicorp