Vault-4279 reporting redundant/unused keys in config

command/server.go

@@ -428,7 +428,7 @@ func (c *ServerCommand) parseConfig() (*server.Config, []configutil.ConfigError,
 }
 
 func (c *ServerCommand) runRecoveryMode() int {
-	config, _, err := c.parseConfig()
+	config, configErrors, err := c.parseConfig()
 	if err != nil {
 		c.UI.Error(err.Error())
 		return 1
@@ -458,6 +458,11 @@ func (c *ServerCommand) runRecoveryMode() int {
 		JSONFormat: logFormat == logging.JSONFormat,
 	})
 
+	// reporting Errors found in the config
+	for _, cErr := range configErrors {
+		c.logger.Error(cErr.String())
+	}
+
 	// Ensure logging is flushed if initialization fails
 	defer c.flushLog()
 
@@ -1071,7 +1076,7 @@ func (c *ServerCommand) Run(args []string) int {
 		config.Listeners[0].Telemetry.UnauthenticatedMetricsAccess = true
 	}
 
-	parsedConfig, _, err := c.parseConfig()
+	parsedConfig, configErrors, err := c.parseConfig()
 	if err != nil {
 		c.UI.Error(err.Error())
 		return 1
@@ -1116,6 +1121,11 @@ func (c *ServerCommand) Run(args []string) int {
 		})
 	}
 
+	// reporting Errors found in the config
+	for _, cErr := range configErrors {
+		c.logger.Error(cErr.String())
+	}
+
 	// Ensure logging is flushed if initialization fails
 	defer c.flushLog()
 
@@ -1539,6 +1549,7 @@ func (c *ServerCommand) Run(args []string) int {
 			// Check for new log level
 			var config *server.Config
 			var level hclog.Level
+			var configErrors []configutil.ConfigError
 			for _, path := range c.flagConfigs {
 				current, err := server.LoadConfig(path)
 				if err != nil {
@@ -1559,6 +1570,11 @@ func (c *ServerCommand) Run(args []string) int {
 				goto RUNRELOADFUNCS
 			}
 
+			// reporting Errors found in the config
+			for _, cErr := range configErrors {
+				c.logger.Error(cErr.String())
+			}
+
 			core.SetConfig(config)
 
 			// reloading custom response headers to make sure we have