diff --git a/website/content/docs/updates/important-changes.mdx b/website/content/docs/updates/important-changes.mdx index 565977168b..c9562dd01a 100644 --- a/website/content/docs/updates/important-changes.mdx +++ b/website/content/docs/updates/important-changes.mdx @@ -147,6 +147,22 @@ None. ## Known issues +### Snowflake DB secrets engine key pair authentication not refreshing credentials successfully ((#snowflake-keypair-refresh)) + +| Change | Status | Affected version | Fixed version +| ----------- | ------ | -------------------------------------- | -------------------- +| Known issue | Open | 1.20.x, 1.19.x, 1.18.x+ent, 1.17.x+ent, 1.16.x+ent | None + +Users using keypair authentication with Snowflake databases may receive errors +due to improper credential refreshes and stale connections in the connection pool. +When two or more concurrent operations occur, Vault tries to reuse an idle +connection from the pool and the request fails due to session timeout in the +Snowflake database. + +#### Recommendation + +As a workaround, you can set the `max_connection_lifetime` to a value below `SESSION_IDLE_TIMEOUT_MINS`. + ### UI KV v2 overview for secret paths containing underscores ((#ui-kvv2-underscore-secrets)) | Change | Affected version | Fixed version