Enable seal wrapping for approle secret storage (#28703)

* Enable seal wrapping for approle secret storage * changelog
hashicorp · Dec 20, 2024 · 3754c67 · 3754c67
1 parent 0d3a82a
commit 3754c67
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/builtin/credential/approle/backend.go b/builtin/credential/approle/backend.go
@@ -110,6 +110,10 @@ func Backend(conf *logical.BackendConfig) (*backend, error) {
 				secretIDLocalPrefix,
 				secretIDAccessorLocalPrefix,
 			},
+			SealWrapStorage: []string{
+				secretIDPrefix,
+				secretIDLocalPrefix,
+			},
 		},
 		Paths: framework.PathAppend(
 			rolePaths(b),

diff --git a/changelog/28703.txt b/changelog/28703.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/approle: seal wrap approle secrets if seal wrap is enabled.
+```