Can't init 1.13.2 with awskms

Vault
1

Vault init from the UI on a new install of 1.13.2 errors with “* parameters secret_shares,secret_threshold not applicable to seal type awskms”.

Environment:

Vault Server Version (retrieve with vault status): 1.13.2

2

My guess is that HashiCorp accidentally broke initializing an auto-unseal cluster via the web UI.

I haven’t exhaustively searched, but Validate parameters for vault operator init by akshya96 · Pull Request #16379 · hashicorp/vault · GitHub looks like a likely trigger, which would mean it has probably been broken since v1.12.0.