pub/vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
Vassiliy Yegorov
2022-07-28 01:17:34 +07:00
parent cba61fcda5
commit b5ff4e46b6
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
data/helpers/init.sh
View File

@@ -1,12 +1,12 @@
apk add jq curl apk add jq curl
VAULT_HOST=http://127.0.0.1:8200 export VAULT_ADDR=http://127.0.0.1:8200
unseal_vault() { unseal_vault() {
root_token=$(cat /helpers/keys.json | jq -r '.root_token') root_token=$(cat /helpers/keys.json | jq -r '.root_token')
vault operator unseal -address=${VAULT_HOST} $(cat /helpers/keys.json | jq -r '.keys[0]') vault operator unseal -address=${VAULT_ADDR} $(cat /helpers/keys.json | jq -r '.keys[0]')
vault -address=${VAULT_HOST} login token=$root_token vault login token=$root_token
} }
if [[ -f /helpers/keys.json ]] if [[ -f /helpers/keys.json ]]
@@ -15,12 +15,12 @@ then
unseal_vault unseal_vault
else else
echo "Vault not initialized" echo "Vault not initialized"
curl -s --request POST --data '{"secret_shares": 1, "secret_threshold": 1}' ${VAULT_HOST}/v1/sys/init > /helpers/keys.json curl -s --request POST --data '{"secret_shares": 1, "secret_threshold": 1}' ${VAULT_ADDR}/v1/sys/init > /helpers/keys.json
unseal_vault unseal_vault
vault -address=${VAULT_HOST} secrets enable -version=2 kv vault secrets enable -version=2 kv
vault-address=${VAULT_HOST} auth enable kubernetes vaul auth enable kubernetes
fi fi
printf "\n\nVAULT_TOKEN=%s\n\n" $root_token printf "\n\nVAULT_TOKEN=%s\n\n" $root_token