backport of commit b3a4ddf (#19158)

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
hashicorp · Feb 13, 2023 · 47be768 · 47be768
1 parent 19c4476
commit 47be768
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/builtin/logical/database/path_rotate_credentials.go b/builtin/logical/database/path_rotate_credentials.go
@@ -73,6 +73,11 @@ func (b *databaseBackend) pathRotateRootCredentialsUpdate() framework.OperationF
 			return nil, fmt.Errorf("unable to rotate root credentials: no username in configuration")
 		}
 
+		rootPassword, ok := config.ConnectionDetails["password"].(string)
+		if !ok || rootPassword == "" {
+			return nil, fmt.Errorf("unable to rotate root credentials: no password in configuration")
+		}
+
 		dbi, err := b.GetConnection(ctx, req.Storage, name)
 		if err != nil {
 			return nil, err

diff --git a/changelog/19103.txt b/changelog/19103.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database: Adds error message requiring password on root crednetial rotation.
+```