The vault lease renew command increments the lease time from the current time, not the end of the

lease. This means that the user can request a specific amount of time they want remaining on the

lease, termed the increment. This is not an increment at the end of the current TTL; it is an increment

from the current time. For example, vault lease renew -increment=3600 my-lease-id would request

that the TTL of the lease be adjusted to 1 hour (3600 seconds) from now. Having the increment be

rooted at the current time instead of the end of the lease makes it easy for users to reduce the length

of leases if they don’t actually need credentials for the full possible lease period, allowing those

credentials to expire sooner and resources to be cleaned up earlier. The requested increment is

completely advisory. The backend in charge of the secret can choose to completely ignore

it1. Reference:

Lease, Renew, and Revoke | Vault | HashiCorp Developer