-
Notifications
You must be signed in to change notification settings - Fork 103
VAULT-37037 docs for Vault proxy update #923
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Vercel Previews Deployed
|
Broken Link CheckerNo broken links found! 🎉 |
| before the secret update has been fully replicated. When using Vault Proxy 1.21+ and Vault Server | ||
| 1.20+, Vault Proxy will handle this automatically, and will use client-controlled consistency | ||
| to retry, if required, on secondary nodes that don't yet have the corresponding secret update. | ||
|
|
||
| On any set of versions lower than those, to make sure that Proxy can get updated |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| before the secret update has been fully replicated. When using Vault Proxy 1.21+ and Vault Server | |
| 1.20+, Vault Proxy will handle this automatically, and will use client-controlled consistency | |
| to retry, if required, on secondary nodes that don't yet have the corresponding secret update. | |
| On any set of versions lower than those, to make sure that Proxy can get updated | |
| before the secret update is fully replicated. | |
| When using Vault Proxy 1.21+ and Vault Server 1.20+, Vault Proxy handles the | |
| incomplete replication automatically with client-controlled consistency. If | |
| needed, Vault Proxy retries the update on any secondary node still missing the | |
| corresponding secret update. | |
| If you use Vault Proxy 1.20 or earlier and/or Vault 1.19 or earlier, to make | |
| sure that Proxy can get updated |
Style correction: write in active voice, avoid "this" as a pronoun, avoid contractions
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Adapted this into the PR, though I did change a few words to make it more accurate (Vault Proxy isn't attempting to update anything in Vault)
| When using Vault Proxy 1.21+ and Vault Server 1.20+, Vault Proxy handles the | ||
| incomplete replication automatically with client-controlled consistency. If | ||
| needed, Vault Proxy retries the read on any secondary node until the | ||
| corresponding secret update's storage index is present on the node. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| corresponding secret update's storage index is present on the node. | |
| storage index for the corresponding secret update is present on the node. |
Style correction: avoid possessives
content/vault/v1.21.x (rc)/content/docs/agent-and-proxy/proxy/caching/static-secret-caching.mdx
Outdated
Show resolved
Hide resolved
…caching/static-secret-caching.mdx
* Create 1.21 docset * Rename 1.21 folder to mark it as an rc docset * Add documentation for new secret list parameter * Add role count product usage metrics * Add docs for client first used time * Add api-docs field description and docs feature explanation * Change description for token creation time * Add docs for AES-CBC * Add api docs for derivedkeys * Add field documentation and info * Fix LDAP docs referencing Azure by mistake * Add reference * Add more info about setting up CMEK for GCP sync * Add section to api docs on batch-fetch certificates. * VAULT-37634, VAULT-36946: Census metrics for recover capability and auto snapshot config counts (#864) * VAULT-37633: Database static role recover (#884) * VAULT-38654: Docs for autoloading snapshots (#890) * Update gcpsm.mdx * Add docs & api-docs for Azure Secrets Static Roles * VAULT-37037 docs for Vault proxy update (#923) * Add docs for KV v2 Version Attribution * [VAULT-39627] Add GUI steps for Secret Engine mount tune. * Prep update docs for 1.21 * Add missing version table * Add SPIFFE auth plugin docs * add docs to Setup login MFA * cumulative api docs * add missing partial * Correct partial paths for summary tables * Add metrics docs changes * add documentation for oracle * add TOTP support to login MFA types * create a partial alert for tech preview, add another sample request and response * Add missing important change info and remove empty release notes * [VAULT] GA to RC sync 20251002 (#1052) * Fix endpoint_url description within https_spiffe_bundle section in API docs * Clarify only one enforcement can be configured for web UI self-enroll * Update metadata docs * Final pre-publication sync (#1076) * Fix important changes pages --------- Co-authored-by: Sarah Chavis <[email protected]> Co-authored-by: Eleonore Carpentier <[email protected]> Co-authored-by: Ellie Sterner <[email protected]> Co-authored-by: akshya96 <[email protected]> Co-authored-by: robmonte <[email protected]> Co-authored-by: akshya96 <[email protected]> Co-authored-by: rculpepper <[email protected]> Co-authored-by: Kit Haines <[email protected]> Co-authored-by: Rachel Culpepper <[email protected]> Co-authored-by: miagilepner <[email protected]> Co-authored-by: Milena Zlaticanin <[email protected]> Co-authored-by: Zlaticanin <[email protected]> Co-authored-by: Violet Hynes <[email protected]> Co-authored-by: Yoko Hyakuna <[email protected]> Co-authored-by: Mike Palmiotto <[email protected]> Co-authored-by: Jaired Jawed <[email protected]> Co-authored-by: Jaired Jawed <[email protected]> Co-authored-by: Vinay Gopalan <[email protected]> Co-authored-by: vinay-gopalan <[email protected]> Co-authored-by: Shannon Roberts <[email protected]> Co-authored-by: Steven Clark <[email protected]> Co-authored-by: Shannon Roberts (Beagin) <[email protected]> Co-authored-by: claire bontempo <[email protected]> Co-authored-by: Jenny Deng <[email protected]> Co-authored-by: Kuba Wieczorek <[email protected]> Co-authored-by: Guilherme Santos <[email protected]> Co-authored-by: claire bontempo <[email protected]> Co-authored-by: divyaac <[email protected]>
Adds the corresponding docs for https://github.com/hashicorp/vault-enterprise/pull/9165
Also ports the change to #921 to the release branch.