From 6995f605821ccb46e56e5ab013495ceb6f29ee65 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Tue, 10 Sep 2024 23:15:26 -0500
Subject: [PATCH] auto unseal

---
 kubernetes/apps/security/vault/app/helmrelease.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kubernetes/apps/security/vault/app/helmrelease.yaml b/kubernetes/apps/security/vault/app/helmrelease.yaml
index b9dd5604..a2539850 100644
--- a/kubernetes/apps/security/vault/app/helmrelease.yaml
+++ b/kubernetes/apps/security/vault/app/helmrelease.yaml
@@ -97,6 +97,12 @@ spec:
                 }
             }
 
+            seal "kubernetes" {
+              secret_name = "vault-unseal-keys"
+              secret_namespace = "security"
+              key_names = ["key1", "key2", "key3"]
+            }
+
             service_registration "kubernetes" {}
       statefulSet:
         securityContext: