From e9f394c549766b973ed9aed9f3ccd7daf98477fb Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Wed, 16 Aug 2023 10:16:42 -0400 Subject: [PATCH] backport of commit 5374b3b046d13d3e7a9f6833efcaeff0e49fddc4 (#22366) Co-authored-by: Hamid Ghaf <83242695+hghaf099@users.noreply.github.com> --- changelog/22363.txt | 3 +++ sdk/physical/cache.go | 5 +++++ 2 files changed, 8 insertions(+) create mode 100644 changelog/22363.txt diff --git a/changelog/22363.txt b/changelog/22363.txt new file mode 100644 index 000000000..faa5a2446 --- /dev/null +++ b/changelog/22363.txt @@ -0,0 +1,3 @@ +```release-note:bug +license: Add autoloaded license path to the cache exempt list. This is to ensure the license changes on the active node is observed on the perfStandby node. +``` diff --git a/sdk/physical/cache.go b/sdk/physical/cache.go index 1471a8916..874d6c529 100644 --- a/sdk/physical/cache.go +++ b/sdk/physical/cache.go @@ -37,6 +37,11 @@ var cacheExceptionsPaths = []string{ // exceptions to avoid unseal errors. See VAULT-17227 "core/seal-config", "core/recovery-config", + + // we need to make sure the persisted license is read from the storage + // to ensure the changes to the autoloaded license on the active node + // is observed on the perfStandby nodes + "core/autoloaded-license", } // CacheRefreshContext returns a context with an added value denoting if the