27 lines
702 B
Bash
27 lines
702 B
Bash
apk add jq curl
|
|
|
|
VAULT_HOST=http://127.0.0.1:8200
|
|
|
|
unseal_vault() {
|
|
root_token=$(cat /helpers/keys.json | jq -r '.root_token')
|
|
|
|
vault operator unseal -address=${VAULT_HOST} $(cat /helpers/keys.json | jq -r '.keys[0]')
|
|
vault -address=${VAULT_HOST} login token=$root_token
|
|
}
|
|
|
|
if [[ -f /helpers/keys.json ]]
|
|
then
|
|
echo "Vault already initialized"
|
|
unseal_vault
|
|
else
|
|
echo "Vault not initialized"
|
|
curl -s --request POST --data '{"secret_shares": 1, "secret_threshold": 1}' ${VAULT_HOST}/v1/sys/init > /helpers/keys.json
|
|
|
|
unseal_vault
|
|
|
|
vault -address=${VAULT_HOST} secrets enable -version=2 kv
|
|
vault-address=${VAULT_HOST} auth enable kubernetes
|
|
fi
|
|
|
|
printf "\n\nVAULT_TOKEN=%s\n\n" $root_token
|