docs: add changelog and website changes for #14922

hashicorp · Oct 18, 2022 · 9213e17 · 9213e17
1 parent af0c94a
commit 9213e17
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/.changelog/14922.txt b/.changelog/14922.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+client: Resolve ACL roles within client ACL cache
+```
+
+```release-note:bug
+client: Check ACL token expiry when resolving token within ACL cache
+```
diff --git a/website/content/docs/configuration/acl.mdx b/website/content/docs/configuration/acl.mdx
@@ -19,6 +19,7 @@ acl {
   enabled    = true
   token_ttl  = "30s"
   policy_ttl = "60s"
+  role_ttl   = "60s"
 }
 ```
 
@@ -42,6 +43,12 @@ acl {
   the request load against servers. If a client cannot reach a server, for example
   because of an outage, the TTL will be ignored and the cached value used.
 
+- `role_ttl` `(string: "30s")` - Specifies the maximum time-to-live (TTL) for
+  cached ACL roles. This does not affect servers, since they do not cache roles.
+  Setting this value lower reduces how stale a role can be, but increases the
+  request load against servers. If a client cannot reach a server, for example
+  because of an outage, the TTL will be ignored and the cached value used.
+
 - `replication_token` `(string: "")` - Specifies the Secret ID of the ACL token
   to use for replicating policies and tokens. This is used by servers in non-authoritative
   region to mirror the policies and tokens into the local region from [authoritative_region][authoritative-region].