'Auto-unseal Vault on GCP on kubernetes

I am trying to auto unseal Vault using GCP kms and on a Kubernetes cluster hosted in GCP.

I created the keys and the service account, have the json file with credentials, but after the deployment with Helm3 when I check the Vault status it shows me SHAMIR seal.

I got the following code inside the values.yaml file under server.ha.config:

>   seal "gcpckms" {
>     credentials = "/tmp/vault_gcs_key.json"
>     project     = "my_project"
>     region      = "global"
>     key_ring    = "vault-unseal-kr"
>     crypto_key  = "vault-unseal-key"   
> }

They keys are created in GCP already and the credentials file exists during the installation.

And I install it with:

helm install vault -n vault hashicorp/vault --set='server.ha.enabled=true' -f values.yaml

What am I doing incorrectly? Can anyone assist please?

Thank you



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source