Reload raft TLS keys on active startup (#11660) (#11663)

hashicorp · May 19, 2021 · fff6f65 · fff6f65
1 parent 814ad56
commit fff6f65
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/vault/raft.go b/vault/raft.go
@@ -186,6 +186,12 @@ func (c *Core) setupRaftActiveNode(ctx context.Context) error {
 	raftBackend.SetupAutopilot(c.activeContext, autopilotConfig, c.raftFollowerStates, disableAutopilot)
 
 	c.pendingRaftPeers = &sync.Map{}
+
+	// Reload the raft TLS keys to ensure we are using the latest version.
+	if err := c.checkRaftTLSKeyUpgrades(ctx); err != nil {
+		return err
+	}
+
 	return c.startPeriodicRaftTLSRotate(ctx)
 }