auto unseal

2024-09-10 23:15:26 -05:00 · 2024-09-10 23:15:26 -05:00 · 6995f60582
commit 6995f60582
parent 723435aa15
1 changed files with 6 additions and 0 deletions
--- a/kubernetes/apps/security/vault/app/helmrelease.yaml
+++ b/kubernetes/apps/security/vault/app/helmrelease.yaml
@ -97,6 +97,12 @@ spec:
                }
            }

+            seal "kubernetes" {
+              secret_name = "vault-unseal-keys"
+              secret_namespace = "security"
+              key_names = ["key1", "key2", "key3"]
+            }
+
            service_registration "kubernetes" {}
      statefulSet:
        securityContext: