'Auto-unseal Vault on GCP on kubernetes
I am trying to auto unseal Vault using GCP kms and on a Kubernetes cluster hosted in GCP.
I created the keys and the service account, have the json file with credentials, but after the deployment with Helm3 when I check the Vault status it shows me SHAMIR seal.
I got the following code inside the values.yaml file under server.ha.config:
> seal "gcpckms" {
> credentials = "/tmp/vault_gcs_key.json"
> project = "my_project"
> region = "global"
> key_ring = "vault-unseal-kr"
> crypto_key = "vault-unseal-key"
> }
They keys are created in GCP already and the credentials file exists during the installation.
And I install it with:
helm install vault -n vault hashicorp/vault --set='server.ha.enabled=true' -f values.yaml
What am I doing incorrectly? Can anyone assist please?
Thank you
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
