diff --git a/builtin/credential/approle/backend.go b/builtin/credential/approle/backend.go index 4afdd59607..1ce71dfa6e 100644 --- a/builtin/credential/approle/backend.go +++ b/builtin/credential/approle/backend.go @@ -110,6 +110,10 @@ func Backend(conf *logical.BackendConfig) (*backend, error) { secretIDLocalPrefix, secretIDAccessorLocalPrefix, }, + SealWrapStorage: []string{ + secretIDPrefix, + secretIDLocalPrefix, + }, }, Paths: framework.PathAppend( rolePaths(b), diff --git a/changelog/28703.txt b/changelog/28703.txt new file mode 100644 index 0000000000..c4283eccb2 --- /dev/null +++ b/changelog/28703.txt @@ -0,0 +1,3 @@ +```release-note:improvement +auth/approle: seal wrap approle secrets if seal wrap is enabled. +``` \ No newline at end of file