Add HSMAutoDeprecated for ent upgrade (#5704)

command/server_util.go

@@ -21,7 +21,7 @@ func adjustCoreForSealMigration(ctx context.Context, core *vault.Core, coreConfi
 	}
 	var existSeal vault.Seal
 	var newSeal vault.Seal
-	if existBarrierSealConfig != nil &&
+	if existBarrierSealConfig != nil && existBarrierSealConfig.Type != vaultseal.HSMAutoDeprecated &&
 		(existBarrierSealConfig.Type != seal.BarrierType() ||
 			config.Seal != nil && config.Seal.Disabled) {
 		// If the existing seal is not Shamir, we're going to Shamir, which

vault/seal/seal.go

@@ -14,6 +14,10 @@ const (
 	GCPCKMS       = "gcpckms"
 	AzureKeyVault = "azurekeyvault"
 	Test          = "test-auto"
+
+	// HSMAutoDeprecated is a deprecated seal type prior to 0.9.0.
+	// It is still referenced in certain code paths for upgrade purporses
+	HSMAutoDeprecated = "hsm-auto"
 )
 
 // Access is the embedded implemention of autoSeal that contains logic