Skip to content

[docs] add known issue where static roles get rotated on upgrade #30145

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Apr 2, 2025
Merged

[docs] add known issue where static roles get rotated on upgrade #30145

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
cbefd69
add known issue where static roles get rotated on upgrade #VAULT-35117)
elliesterner Apr 1, 2025
ddecad3
Update website/content/partials/known-issues/static-role-premature-ro…
elliesterner Apr 1, 2025
ff53a4c
Update website/content/partials/known-issues/static-role-premature-ro…
elliesterner Apr 1, 2025
b964153
Merge branch 'main' into docs/known-issue-static-role-rotations
elliesterner Apr 2, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion website/content/docs/release-notes/1.16.1.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ description: |-
| New default (1.16.13) | [Vault product usage metrics reporting](/vault/docs/upgrading/upgrade-to-1.6.x#product-usage-reporting) |
| Deprecation (1.16.13) | [`default_report_months` is deprecated for the `sys/internal/counters` API](/vault/docs/upgrading/upgrade-to-1.16.x#activity-log-changes) |
| Known Issue (1.16.16) | [Authorization failures using Azure federated identity credentials](/vault/docs/upgrading/upgrade-to-1.16.x#authorization-failures-using-azure-federated-identity-credentials) |

| Known issue (1.16.16) | [Unexpected static role rotations on upgrade](/vault/docs/upgrading/upgrade-to-1.16.x#static-role-rotations)

## Vault companion updates

Expand Down
1 change: 1 addition & 0 deletions website/content/docs/release-notes/1.17.0.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@ description: |-
| New default (1.17.9) | [Vault product usage metrics reporting](/vault/docs/upgrading/upgrade-to-1.17.x#product-usage-reporting) |
| Deprecation (1.17.9) | [`default_report_months` is deprecated for the `sys/internal/counters` API](/vault/docs/upgrading/upgrade-to-1.17.x#activity-log-changes) |
| Known Issue (1.17.12) | [Authorization failures using Azure federated identity credentials](/vault/docs/upgrading/upgrade-to-1.17.x#authorization-failures-using-azure-federated-identity-credentials) |
| Known issue (1.17.12) | [Unexpected static role rotations on upgrade](/vault/docs/upgrading/upgrade-to-1.17.x#static-role-rotations)

## Vault companion updates

Expand Down
1 change: 1 addition & 0 deletions website/content/docs/release-notes/1.18.0.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ description: |-
| Beta feature removed (1.18) | [Request limiter removed](/vault/docs/upgrading/upgrade-to-1.18.x#request-limiter-configuration-removal) |
| New default (1.18.2) | [Vault product usage metrics reporting](/vault/docs/upgrading/upgrade-to-1.18.x#product-usage-reporting) |
| Known Issue (1.18.5) | [Authorization failures using Azure federated identity credentials](/vault/docs/upgrading/upgrade-to-1.18.x#authorization-failures-using-azure-federated-identity-credentials) |
| Known issue (1.18.5) | [Unexpected static role rotations on upgrade](/vault/docs/upgrading/upgrade-to-1.18.x#static-role-rotations)

## Vault companion updates

Expand Down
3 changes: 2 additions & 1 deletion website/content/docs/release-notes/1.19.0.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,8 @@ description: |-
| Known issue (1.19.x, 1.18.x, 1.17.x, 1.16.x) | [Duplicate HSM keys creation when migrating to HSM from Shamir](/vault/docs/upgrading/upgrade-to-1.19.x#hsm-keys)
| New behavior (1.19.0) | [Uppercase values are no longer forced to lower case](/vault/docs/upgrading/upgrade-to-1.19.x#case-sensitive)
| Known issue (1.19.0) | [Login/token renewal failures after group changes](/vault/docs/upgrading/upgrade-to-1.19.x#group-writes)

| Known issue (1.19.0) | [Unexpected static role rotations on upgrade](/vault/docs/upgrading/upgrade-to-1.19.x#static-role-rotations)


## Feature deprecations and EOL

Expand Down
2 changes: 2 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.16.x.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -240,3 +240,5 @@ more details, and information about opt-out.
@include 'known-issues/database-skip-static-role-rotation.mdx'

@include 'known-issues/azure-unseal-regression.mdx'

@include 'known-issues/static-role-premature-rotations.mdx'
2 changes: 2 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.17.x.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -211,3 +211,5 @@ more details, and information about opt-out.
@include 'known-issues/database-skip-static-role-rotation.mdx'

@include 'known-issues/azure-unseal-regression.mdx'

@include 'known-issues/static-role-premature-rotations.mdx'
2 changes: 2 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.18.x.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -146,3 +146,5 @@ more details, and information about opt-out.
@include 'known-issues/database-skip-static-role-rotation.mdx'

@include 'known-issues/azure-unseal-regression.mdx'

@include 'known-issues/static-role-premature-rotations.mdx'
4 changes: 3 additions & 1 deletion website/content/docs/upgrading/upgrade-to-1.19.x.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,4 +97,6 @@ As of Vault 1.19.0 the RADIUS authentication plugin will not force case sensitiv

@include 'known-issues/duplicate-hsm-key.mdx'

@include 'known-issues/1_19-failures-after-external-group-changes-standby.mdx'
@include 'known-issues/1_19-failures-after-external-group-changes-standby.mdx'

@include 'known-issues/static-role-premature-rotations.mdx'
13 changes: 13 additions & 0 deletions website/content/partials/known-issues/static-role-premature-rotations.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
### Static role rotations on upgrade ((#static-role-rotations))

#### Affected Versions
- 1.19.0, 1.18.5, 1.17.12, 1.16.16

#### Issue
Vault automatically rotates existing static roles tied to database and LDAP
credentials once when upgrading to an affected version. After the one-time
rotation, the static roles behave as expected.

#### Workaround
If you rely on LDAP or static database roles, avoid upgrading to the affected
versions until we fix the issue.
Loading