luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

[VAULT-20073] Docs: update upgrade guide for 1.15 with information on Sentinel RGP group policy application (#23296) (#23350) 

Co-authored-by: Kuba Wieczorek <kuba.wieczorek@hashicorp.com>
Co-authored-by: Peter Wilson <peter.wilson@hashicorp.com>
This commit is contained in:
hc-github-team-secure-vault-core 2023-09-27 17:06:07 -04:00 committed by GitHub
parent 486865f704
commit d2465da3fd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
website/content/docs/upgrading/upgrade-to-1.13.x.mdx
View File

@ -89,6 +89,10 @@ FAQ](/vault/docs/deprecation/faq#q-what-are-the-phases-of-deprecation).
Affects upgrading from any version of Vault to 1.13.x. All other upgrade paths
are unaffected.
### Application of Sentinel Role Governing Policies (RGPs) via identity groups
@include 'application-of-sentinel-rgps-via-identity-groups.mdx'
## Known issues
@include 'tokenization-rotation-persistence.mdx'

4
website/content/docs/upgrading/upgrade-to-1.14.x.mdx
View File

@ -31,6 +31,10 @@ Official images separately.
`vault.raft_storage.bolt.write.time` has been corrected from a summary to a counter to more accurately reflect that it
is measuring cumulative time writing, and not the distribution of individual write times.
### Application of Sentinel Role Governing Policies (RGPs) via identity groups
@include 'application-of-sentinel-rgps-via-identity-groups.mdx'
## Known issues and workarounds
@include 'known-issues/ui-pki-control-groups.mdx'

5
website/content/partials/application-of-sentinel-rgps-via-identity-groups.mdx Normal file
View File

@ -0,0 +1,5 @@
As of versions `1.15.0`, `1.14.4`, and `1.13.8`, [the Sentinel RGPSs derived from membership in identity groups apply
only to entities in the same and child namespaces, relative to the identity group](/vault/docs/enterprise/sentinel#rgps-and-namespaces).
Also, the [`group_policy_application_mode`](/vault/api-docs/system/config-group-policy-application) only applies to
to ACL policies. Vault Sentinel Role Governing Policies (RGPs) are not affected by group policy application mode.