mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-11-01 19:17:58 +00:00
add check for enable_multiseal with sighup (#26105)
This commit is contained in:
@@ -3404,6 +3404,9 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor
|
||||
|
||||
currentConfig := core.GetCoreConfigInternal()
|
||||
|
||||
// we need to persist seal information if multiseal is being enabled
|
||||
addEnableMultiseal := !currentConfig.IsMultisealEnabled() && newConfig.IsMultisealEnabled()
|
||||
|
||||
if core.SealAccess().BarrierSealConfigType() == vault.SealConfigTypeShamir {
|
||||
switch {
|
||||
case len(newConfig.Seals) == 0:
|
||||
@@ -3425,7 +3428,7 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor
|
||||
}
|
||||
}
|
||||
|
||||
if cmp.Equal(currentConfig.Seals, newConfig.Seals) {
|
||||
if cmp.Equal(currentConfig.Seals, newConfig.Seals) && !addEnableMultiseal {
|
||||
return false, nil
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user