[VAULT] 1.21.x publication prep: GA -> RC sync

content/vault/v1.21.x (rc)/content/api-docs/auth/kubernetes.mdx

@@ -146,7 +146,7 @@ entities attempting to login.
   [LabelSelector](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.24/#labelselector-v1-meta). Currently, label selectors with `matchExpressions` are not supported.
   To use label selectors, **Vault must have permission to read namespaces** on the Kubernetes
   cluster. If set with `bound_service_account_namespaces`, the conditions are `OR`ed.
-- `audience` `(string: "")` - Audience claim to verify in the JWT. Will be required in Vault 1.21+.
+- `audience` `(string: "")` - Audience claim to verify in the JWT.
 - `alias_name_source` `(string: "serviceaccount_uid")` - Configures how identity aliases are generated.
   Valid choices are: `serviceaccount_uid` and `serviceaccount_name`.
 

content/vault/v1.21.x (rc)/content/docs/auth/kubernetes.mdx

@@ -111,9 +111,6 @@ management tool.
       ttl=1h
   ```
 
-  !> **Note:** `audience` will be a required field in Vault 1.21+. This field is used
-  to verify the JWT token's audience claim.
-
   This role authorizes the "myapp" service account in the default
   namespace and it gives it the default policy.
 

content/vault/v1.21.x (rc)/content/docs/configuration/storage/raft.mdx

@@ -193,7 +193,9 @@ set [`disable_mlock`](/vault/docs/configuration#disable_mlock) to `true`, and to
 - `leader_api_addr` `(string: "")` - Address of a possible leader node.
 
 - `auto_join` `(string: "")` - Cloud auto-join configuration, using
-  [go-discover](https://github.com/hashicorp/go-discover) syntax.
+  [go-discover](https://github.com/hashicorp/go-discover) syntax.  Setting
+  `addr_typeaddress_type=private_v4` or `address_type=public_v4` forces Vault to
+  use IPv4 addresses.
 
 - `auto_join_scheme` `(string: "")` - The optional URI protocol scheme for addresses
   discovered via auto-join. Available values are `http` or `https`.