add check for enable_multiseal with sighup (#26105)

This commit is contained in:
Rachel Culpepper
2024-03-22 11:21:32 -05:00
committed by GitHub
parent 30667916b7
commit f7301bc5fa

View File

@@ -3404,6 +3404,9 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor
currentConfig := core.GetCoreConfigInternal()
// we need to persist seal information if multiseal is being enabled
addEnableMultiseal := !currentConfig.IsMultisealEnabled() && newConfig.IsMultisealEnabled()
if core.SealAccess().BarrierSealConfigType() == vault.SealConfigTypeShamir {
switch {
case len(newConfig.Seals) == 0:
@@ -3425,7 +3428,7 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor
}
}
if cmp.Equal(currentConfig.Seals, newConfig.Seals) {
if cmp.Equal(currentConfig.Seals, newConfig.Seals) && !addEnableMultiseal {
return false, nil
}