Add note about root_rotation_statements workaround for special chars (#11378)

This commit is contained in:
Michael Golowka 2021-04-21 13:58:48 -06:00 committed by GitHub
parent a62202eb87
commit 29d91d09ff
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 0 deletions

View File

@ -175,3 +175,16 @@ list the plugin does not support that statement type.
serialized JSON string array, or a base64-encoded serialized JSON string
array. The '{{username}}' value will be substituted. If not provided, defaults to
a generic drop user statement
- `root_rotation_statements` `(list: [])` - Specifies the database statements
to be executed when rotating the root user's password. Must be a
semicolon-separated string, a base64-encoded semicolon-separated string, a
serialized JSON string array, or a base64-encoded serialized JSON string
array. The '{{username}}' value will be substituted. If not provided, defaults to
a reasonable default alter user statement.
~> Prior to Vault 1.7.1 and 1.6.4 the default `root_rotation_statements` does not
allow for usernames with special characters in them due to missing quotes
around the username. To fix this issue in versions prior to Vault 1.7.1/1.6.4,
specify the following `root_rotation_statements`:<br/>
`ALTER USER '{{username}}' WITH PASSWORD '{{password}}';`