Bust recovery cache after unsealed is set true to force migration

hashicorp · Dec 19, 2017 · 10ab224 · 10ab224
1 parent f46e6ca
commit 10ab224
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/vault/core.go b/vault/core.go
@@ -1218,6 +1218,12 @@ func (c *Core) unsealInternal(masterKey []byte) (bool, error) {
 
 	// Success!
 	c.sealed = false
+
+	// Force a cache bust here, which will also run migration code
+	if c.seal.RecoveryKeySupported() {
+		c.seal.SetRecoveryConfig(nil)
+	}
+
 	if c.ha != nil {
 		sd, ok := c.ha.(physical.ServiceDiscovery)
 		if ok {