scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-10-30 18:17:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add paths for seal config to cache exceptions. (#21223)

Browse Source 
Add paths for seal config to cache exceptions.

Add barrierSealConfigPath and recoverySealConfigPlaintextPath to
cacheExceptionsPaths in order to avoid a race that causes some
nodes to always see a nil value.
This commit is contained in:
Victor Rodriguez
2023-06-14 17:09:29 -04:00
committed by GitHub
parent ddff68c82a
commit 58f029d608
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
changelog/21223.txt Normal file
View File

@@ -0,0 +1,3 @@
```release-note:bug
core: Do not cache seal configuration to fix a bug that resulted in sporadic auto unseal failures.
```

5
sdk/physical/cache.go
View File

@@ -32,6 +32,11 @@ var cacheExceptionsPaths = []string{
"sys/expire/", "sys/expire/",
"core/poison-pill", "core/poison-pill",
"core/raft/tls", "core/raft/tls",
// Add barrierSealConfigPath and recoverySealConfigPlaintextPath to the cache
// exceptions to avoid unseal errors. See VAULT-17227
"core/seal-config",
"core/recovery-config",
} }
// CacheRefreshContext returns a context with an added value denoting if the // CacheRefreshContext returns a context with an added value denoting if the