backport of commit 12bce35 (#15896)

Co-authored-by: Hridoy Roy <[email protected]>
hashicorp · Jun 9, 2022 · b3a2b78 · b3a2b78
1 parent 548baed
commit b3a2b78
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/changelog/15879.txt b/changelog/15879.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Limit SSCT WAL checks on perf standbys to raft backends only
+```
diff --git a/vault/request_handling.go b/vault/request_handling.go
@@ -1941,6 +1941,12 @@ func (c *Core) checkSSCTokenInternal(ctx context.Context, token string, isPerfSt
 	if err != nil {
 		return "", err
 	}
+
+	// Disregard SSCT on perf-standbys for non-raft storage
+	if c.perfStandby && c.getRaftBackend() == nil {
+		return plainToken.Random, nil
+	}
+
 	ep := int(plainToken.IndexEpoch)
 	if ep < c.tokenStore.GetSSCTokensGenerationCounter() {
 		return plainToken.Random, nil