backport of commit 12bce35

hashicorp · Jun 8, 2022 · 74225bf · 74225bf
1 parent ca4502a
commit 74225bf
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/changelog/15879.txt b/changelog/15879.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Limit SSCT WAL checks on perf standbys to raft backends only
+```
diff --git a/vault/request_handling.go b/vault/request_handling.go
@@ -1941,6 +1941,12 @@ func (c *Core) checkSSCTokenInternal(ctx context.Context, token string, isPerfSt
 	if err != nil {
 		return "", err
 	}
+
+	// Disregard SSCT on perf-standbys for non-raft storage
+	if c.perfStandby && c.getRaftBackend() == nil {
+		return plainToken.Random, nil
+	}
+
 	ep := int(plainToken.IndexEpoch)
 	if ep < c.tokenStore.GetSSCTokensGenerationCounter() {
 		return plainToken.Random, nil