Verified Commit db5ccba4 authored by Xueshan Feng's avatar Xueshan Feng
Browse files

added vault-seal: target.

parent 2453af46

makefile_parts/vault.mk

+4 −1
Original line number Diff line number Diff line 
# Vault operations



.PHONY: vault-unseal

vault-unseal: check-tools ## Check if vault is initialized

vault-unseal: check-tools ## Unseal Vault

	@${SCRIPTS_DIR}/vault-unseal.sh \

		-s ${VAULT_KEY_SHARES} \

		-v vault0.${ROUTE53_ZONE_NAME}

.PHONY: vault-seal

vault-seal: check-tools ## Seal Vault in emergency

	@${SCRIPTS_DIR}/vault-seal.sh



.PHONY: vault-init

vault-init: check-tools ## Initialize vault. Operations need to be on VPN.