From f7301bc5fa965c39bbc807a862a7b8be02c4635f Mon Sep 17 00:00:00 2001 From: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com> Date: Fri, 22 Mar 2024 11:21:32 -0500 Subject: [PATCH] add check for enable_multiseal with sighup (#26105) --- command/server.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/command/server.go b/command/server.go index 83b2928abe..45b3041a20 100644 --- a/command/server.go +++ b/command/server.go @@ -3404,6 +3404,9 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor currentConfig := core.GetCoreConfigInternal() + // we need to persist seal information if multiseal is being enabled + addEnableMultiseal := !currentConfig.IsMultisealEnabled() && newConfig.IsMultisealEnabled() + if core.SealAccess().BarrierSealConfigType() == vault.SealConfigTypeShamir { switch { case len(newConfig.Seals) == 0: @@ -3425,7 +3428,7 @@ func (c *ServerCommand) reloadSeals(ctx context.Context, grabStateLock bool, cor } } - if cmp.Equal(currentConfig.Seals, newConfig.Seals) { + if cmp.Equal(currentConfig.Seals, newConfig.Seals) && !addEnableMultiseal { return false, nil }