Verified Commit e3653271 authored by Xueshan Feng's avatar Xueshan Feng
Browse files

update with vault operator seal.

parent db5ccba4

mount-sys-backend.sh

+4 −0
Original line number Diff line number Diff line
@@ -29,6 +29,10 @@ fi 


pushd $data_dir > /dev/null



# As of vault 0.10.4, default secret kv backend is enabled in version1. We need to convernt it to version2

vault kv enable-versioning secret/

vault secrets tune -description="KV 2" secret/



# MOUNT AUDIT BACKENDS

provision -c check_parent_list -C put_file -u do_nothing sys/audit/*.json

provision-policies.sh

+1 −1
Original line number Diff line number Diff line
@@ -70,7 +70,7 @@ for secret_path in $(cat $data_dir/secret/projects $data_dir/secret/groups) ; do 
EOF

      echo

      echo "== Processing secret and policy for ${project_category}/${project}"

      provision -c always_update -C post_file -u post_file -p secret/${project_category}/${project} /tmp/PLACEHOLDER

      vault kv put secret/${project_category}/${project}/PLACEHOLDER  @/tmp/PLACEHOLDER

      provision -c always_update -C put_policy -u put_policy -p sys/policy/${project_category} ${TMPDIR}/policy-generated/${project_category}/${project}-*.{hcl,json}

done

utils/functions.sh

+1 −1
Original line number Diff line number Diff line
@@ -188,7 +188,7 @@ vault_seal() { 
  echo "Sealing Vault"

  for i in ${VAULT_SERVERS}

  do

    VAULT_ADDR=https://$i vault seal 

    VAULT_ADDR=https://$i vault operator seal

  done

}