Skip to content

Latest commit

 

History

History
68 lines (48 loc) · 1.73 KB

README.md

File metadata and controls

68 lines (48 loc) · 1.73 KB

Initialize and unseal Vault

Prerequisites

Having completed labs:

Initialize Vault

$ kubectl exec -n vault vault-0 -- vault operator init -key-shares=1 -key-threshold=1 -format=json > ../keys.json

Set the VAULT_UNSEAL_KEY variable

$ export VAULT_UNSEAL_KEY=$(cat ../keys.json | jq -r ".unseal_keys_b64[]")

Unseal Vault

Now unseal Vault using the key (unseal threshold=1)

$ kubectl exec vault-0 -n vault -- vault operator unseal $VAULT_UNSEAL_KEY
Key             Value
---             -----
Seal Type       shamir
Initialized     true
Sealed          false
Total Shares    1
Threshold       1
Version         1.12.1
Build Date      2022-10-27T12:32:05Z
Storage Type    file
Cluster Name    vault-cluster-e7391ce8
Cluster ID      373e4e12-a7d8-5b5e-6c91-e6c04fc5e1bb
HA Enabled      false

The vault-0 pod is now Ready, it means that Vault instance has been unsealed

Re-initialization

In our lab environment, in the case you want to re-initialize Vault, just remove its PVC, the associated PV and the Helm release, for example:

$ helm delete vault -n vault
release "vault" uninstalled
$ kubectl delete pv pvc-44112c2d-f02b-41f3-9bf9-5a086c0d0a58
persistentvolume "pvc-44112c2d-f02b-41f3-9bf9-5a086c0d0a58" deleted
$ kubectl delete pvc data-vault-0 -n vault                                                                                 
persistentvolumeclaim "data-vault-0" deleted

and restart from the previous lab.