define batch token interaction with lease count quota (#13127)

This commit is contained in:
swayne275
2021-11-11 16:09:44 -07:00
committed by GitHub
parent d786373144
commit 231ef1de62

View File

@@ -17,6 +17,9 @@ It is important to note that lease count quotas do not apply to the root tokens.
If the number of leases in the cluster hits the configured limit, `max_leases`,
an operator could still create a root token and access the cluster to try to recover.
Additionally, batch token creation is blocked when the lease count quota is
exceeded, but batch tokens do not count towards the quota.
All the nodes in the Vault cluster will share the lease quota rules, meaning that
the lease counters will be shared, regardless of which node in the Vault cluster
receives lease generation requests. Lease quotas can be imposed across Vault's API,