Add paths for seal config to cache exceptions. (#21223)

Add paths for seal config to cache exceptions.

Add barrierSealConfigPath and recoverySealConfigPlaintextPath to
cacheExceptionsPaths in order to avoid a race that causes some
nodes to always see a nil value.
This commit is contained in:
Victor Rodriguez
2023-06-14 17:09:29 -04:00
committed by GitHub
parent ddff68c82a
commit 58f029d608
2 changed files with 8 additions and 0 deletions

3
changelog/21223.txt Normal file
View File

@@ -0,0 +1,3 @@
```release-note:bug
core: Do not cache seal configuration to fix a bug that resulted in sporadic auto unseal failures.
```

View File

@@ -32,6 +32,11 @@ var cacheExceptionsPaths = []string{
"sys/expire/",
"core/poison-pill",
"core/raft/tls",
// Add barrierSealConfigPath and recoverySealConfigPlaintextPath to the cache
// exceptions to avoid unseal errors. See VAULT-17227
"core/seal-config",
"core/recovery-config",
}
// CacheRefreshContext returns a context with an added value denoting if the