Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of VAULT-28192 Add known issue for Agent/Proxy CPU issue into release/1.17.x #27525

Merged
merged 1 commit into from
Jun 18, 2024
Merged

Backport of VAULT-28192 Add known issue for Agent/Proxy CPU issue into release/1.17.x #27525

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions website/content/docs/release-notes/1.17.0.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,13 @@ description: |-

## Important changes

| Change | Description
|-------------------------|------------
| New default | [Allowed audit headers now have unremovable defaults](/vault/docs/upgrading/upgrade-to-1.17.x#audit-headers)
| Opt out feature | [PKI sign-intermediate now truncates `notAfter` field to signing issuer](/vault/docs/upgrading/upgrade-to-1.17.x#pki-truncate)
| Beta feature deprecated | [Request limiter deprecated](/vault/docs/upgrading/upgrade-to-1.17.x#request-limiter)
| Known issue | [PKI OCSP GET requests can return HTTP redirect responses](/vault/docs/upgrading/upgrade-to-1.17.x#pki-ocsp)
| Change | Description |
|--------------------------------|--------------------------------------------------------------------------------------------------------------------------------|
| New default (1.17) | [Allowed audit headers now have unremovable defaults](/vault/docs/upgrading/upgrade-to-1.17.x#audit-headers) |
| Opt out feature (1.17) | [PKI sign-intermediate now truncates `notAfter` field to signing issuer](/vault/docs/upgrading/upgrade-to-1.17.x#pki-truncate) |
| Beta feature deprecated (1.17) | [Request limiter deprecated](/vault/docs/upgrading/upgrade-to-1.17.x#request-limiter) |
| Known issue (1.17.0+) | [PKI OCSP GET requests can return HTTP redirect responses](/vault/docs/upgrading/upgrade-to-1.17.x#pki-ocsp) |
| Known issue (1.17.0) | [Vault Agent and Vault Proxy consume excessive amounts of CPU](/vault/docs/upgrading/upgrade-to-1.17.x#agent-proxy-cpu-1-17) |

## Vault companion updates

Expand Down Expand Up @@ -116,7 +117,7 @@ Follow the learn more links for more information, or browse the list of
Learn more: <a href="/vault/docs/secrets/pki/est">Enrollment over Secure Transport (EST)</a> overview
</td>
</tr>

<tr>
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
<td style={{verticalAlign: 'middle'}}>
Expand Down
2 changes: 2 additions & 0 deletions website/content/docs/upgrading/upgrade-to-1.17.x.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,3 +83,5 @@ incorrectly. For additional details, refer to the
## Known issues and workarounds

@include 'known-issues/ocsp-redirect.mdx'

@include 'known-issues/agent-and-proxy-excessive-cpu-1-17.mdx'
12 changes: 12 additions & 0 deletions website/content/partials/known-issues/agent-and-proxy-excessive-cpu-1-17.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
<a id="agent-proxy-cpu-1-17" />

### Vault Agent and Vault Proxy consume an excessive amount of CPU

Vault Agent and Vault Proxy consume an exessive amount of CPU during normal
operation in 1.17.0.

We recommend waiting until 1.17.1 to upgrade Agent and Proxy.

#### Impacted versions

Affects 1.17.0.
2 changes: 1 addition & 1 deletion website/content/partials/known-issues/ocsp-redirect.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,4 +10,4 @@ As a workaround, OCSP POST requests can be used which are unaffected.

#### Impacted versions

Affects all current versions of 1.12.x, 1.13.x, 1.14.x, 1.15.x, 1.16.x
Affects all current versions of 1.12.x, 1.13.x, 1.14.x, 1.15.x, 1.16.x, 1.17.x.
Loading