mirror of
https://github.com/luzifer-docker/vault-self-unseal.git
synced 2024-12-20 15:11:18 +00:00
Contains a script to unseal a local Vault instance as part of a Vault cluster which leader currently is unsealed
Knut Ahlers
ec545715d4
for example through a Kubernetes secret Signed-off-by: Knut Ahlers <knut@ahlers.me> |
||
---|---|---|
Dockerfile | ||
entrypoint.sh | ||
LICENSE | ||
README.md |
luzifer-docker / vault-self-unseal
Contains a script to unseal a local Vault instance as part of a Vault cluster which leader currently is unsealed. As long as there is one unsealed leader this script can unseal the local instance, if there is no unsealed leader left the unseal will fail.
Usage
## Build container (optional)
$ docker build -t luzifer/vault-self-unseal .
## Execute vault-self-unseal
$ docker run --rm -ti -e LIVE_VAULT_ADDR=https://myvault.example.com -e VAULT_ROLE_ID=some-uuid luzifer/vault-self-unseal