Skip to content

Commit 7c43451

Browse files
committed
Document fix for multi-seal rewrap known issue
1 parent 98b1127 commit 7c43451

File tree

8 files changed

+6
-14
lines changed

8 files changed

+6
-14
lines changed

content/vault/global/partials/important-changes/known-issue/multi-seal-rewrap.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
| Change | Affected versions | Fixed version |
44
|-------------|------------------------------------------------|---------------|
5-
| Known issue | 1.20.x+ent, 1.19.x+ent, 1.18.x+ent, 1.16.x+ent | None |
5+
| Known issue | 1.20.x+ent, 1.19.x+ent, 1.18.x+ent, 1.16.x+ent | 1.21.x+ent, 1.20.5+ent, 1.19.11+ent, 1.16.27 |
66

77
A full rewrap happens when Vault fails over to a DR or performance cluster with `enable_multiseal = true`.
88
The rewrap can lead to performance degradation until the rewrap operation completes.

content/vault/global/partials/important-changes/summary-tables/1_16.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,4 +51,4 @@ Found | Fixed | Workaround | Edition | Issue
5151
1.16.16 | 1.16.20 | Upgrade | All | [Unexpected LDAP static role rotations on upgrade](/vault/docs/v1.16.x/updates/important-changes#ldap-static-role-rotations-on-upgrade)
5252
1.16.17 | 1.16.21 | **Yes** | Enterprise | [External Enterprise plugins cannot run on a standby node when it becomes active](/vault/docs/v1.16.x/updates/important-changes#external-ent-plugins)
5353
1.16.18 | 1.16.21 | Upgrade | All | [Azure authN fails to authenticate Uniform VMSS instances](/vault/docs/v1.16.x/updates/important-changes#azure-auth-fails-to-authenticate-uniform-vmss-instances)
54-
1.16.0 | No | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.16.x/upgrading/upgrade-to-1.16.x#multi-seal-rewrap)
54+
1.16.0 | 1.16.27 | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.16.x/upgrading/upgrade-to-1.16.x#multi-seal-rewrap)

content/vault/global/partials/important-changes/summary-tables/1_19.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,4 +44,4 @@ Found | Fixed | Workaround | Edition | Issue
4444
1.18.4 | No | **Yes** | All | [Failing credential refresh for Snowflake DB secrets engine key pair authentication](/vault/docs/v1.19.x/updates/important-changes#snowflake-keypair-refresh)
4545
1.19.0 | No | No | All | [Writing configuration to local auth mount (ldap, aws, gcp, azure) ignores local flag](/vault/docs/v1.19.x/updates/important-changes#local-auth-known-issue)
4646
1.19.0 | No | **Yes** | Enterprise | [Missed events with multiple event clients](/vault/docs/v1.19.x/updates/important-changes#missed-events)
47-
1.19.0 | No | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.19.x/updates/important-changes#multi-seal-rewrap)
47+
1.19.0 | 1.19.11 | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.19.x/updates/important-changes#multi-seal-rewrap)

content/vault/global/partials/important-changes/summary-tables/1_20.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,4 +32,4 @@ Found | Fixed | Workaround | Edition | Issue
3232
1.20.0 | 1.20.1 | **Yes** | All | [Duplicate LDAP password rotations on standby node check-in](/vault/docs/v1.20.x/updates/important-changes#ldap-checkin)
3333
1.20.0 | No | No | All | [Writing configuration to local auth mount (ldap, aws, gcp, azure) ignores local flag](/vault/docs/v1.20.x/updates/important-changes#local-auth-known-issue)
3434
1.20.0 | No | **Yes** | Enterprise | [Missed events with multiple event clients](/vault/docs/v1.20.x/updates/important-changes#missed-events)
35-
1.20.0 | No | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.20.x/updates/important-changes#multi-seal-rewrap)
35+
1.20.0 | 1.20.5 | No | Enterprise | [Full seal rewraps occur on DR/PR failover with multi-seal enabled](/vault/docs/v1.20.x/updates/important-changes#multi-seal-rewrap)

content/vault/v1.16.x/content/docs/upgrading/upgrade-to-1.16.x.mdx

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -309,6 +309,4 @@ If you use `file` audit devices, you need to:
309309

310310
@include 'known-issues/enterprise-plugins.mdx'
311311

312-
@include '../../../global/partials/important-changes/known-issue/multi-seal-rewrap.mdx'
313-
314312
@include '../../../global/partials/important-changes/known-issue/ssrf-block-endpoint.mdx'

content/vault/v1.18.x/content/docs/upgrading/upgrade-to-1.16.x.mdx

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -302,5 +302,3 @@ more details, and information about opt-out.
302302
@include 'known-issues/sync-activation-flags-cache-not-updated.mdx'
303303

304304
@include 'known-issues/enterprise-plugins.mdx'
305-
306-
@include '../../../global/partials/important-changes/known-issue/multi-seal-rewrap.mdx'

content/vault/v1.19.x/content/docs/updates/important-changes.mdx

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -526,6 +526,4 @@ If you have multiple event subscribers with the same namespace and event type
526526
filters you have two options:
527527

528528
1. Spread them out among the nodes of the Vault cluster.
529-
1. Only subscribe to events on the active node of the cluster.
530-
531-
@include '../../../global/partials/important-changes/known-issue/multi-seal-rewrap.mdx'
529+
1. Only subscribe to events on the active node of the cluster.

content/vault/v1.20.x/content/docs/updates/important-changes.mdx

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -435,6 +435,4 @@ If you have multiple event subscribers with the same namespace and event type
435435
filters you have two options:
436436

437437
1. Spread them out among the nodes of the Vault cluster.
438-
1. Only subscribe to events on the active node of the cluster.
439-
440-
@include '../../../global/partials/important-changes/known-issue/multi-seal-rewrap.mdx'
438+
1. Only subscribe to events on the active node of the cluster.

0 commit comments

Comments
 (0)