Skip to content

Commit

Permalink
Lease count quotas does not apply to root tokens (hashicorp#12405)
Browse files Browse the repository at this point in the history
  • Loading branch information
@hghaf099 @jartek
hghaf099 authored and jartek committed Sep 11, 2021
1 parent f9fe6d8 commit e70a093
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions website/content/docs/enterprise/lease-count-quotas.mdx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,10 @@ number of leases in the cluster hits the configured limit, `max_leases`, additio
lease creations will be forbidden for all clients until a lease has been revoked
or has expired.

It is important to note that lease count quotas do not apply to the root tokens.
If the number of leases in the cluster hits the configured limit, `max_leases`,
an operator could still create a root token and access the cluster to try to recover.

All the nodes in the Vault cluster will share the lease quota rules, meaning that
the lease counters will be shared, regardless of which node in the Vault cluster
receives lease generation requests. Lease quotas can be imposed across Vault's API,
Expand Down

0 comments on commit e70a093

Please sign in to comment.