Add known issue text for PKI revocation (#19632)

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
This commit is contained in:
Alexander Scheel 2023-03-20 12:24:05 -04:00 committed by GitHub
parent 411705d723
commit 1fe1c756ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions

View File

@ -81,3 +81,15 @@ are unaffected.
@include 'tokenization-rotation-persistence.mdx'
@include 'ocsp-redirect.mdx'
### PKI Revocation Request Forwarding
If a revocation request comes in to a standby or performance secondary node,
for a certificate that is present locally, the request will not be correctly
forwarded to the active node of this cluster.
As a workaround, submit revocation requests to the active node only.
#### Impacted Versions
Affects Vault 1.13.0 only.