Final fix for Vault auto-unseal (hopefully).
Auto-Unseal for Vault / Unseal Vault (push) Has been cancelled
Auto-Unseal for Vault / Unseal Vault (push) Has been cancelled
This commit is contained in:
@@ -1,12 +1,8 @@
|
||||
name: Auto-Unseal for Vault
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- 'main'
|
||||
paths:
|
||||
- '**/vault-auto-unseal.yml'
|
||||
# schedule:
|
||||
# - cron: "30 4 * * *"
|
||||
schedule:
|
||||
- cron: "30 2 * * *"
|
||||
jobs:
|
||||
auto-unseal:
|
||||
name: Unseal Vault
|
||||
@@ -28,8 +24,6 @@ jobs:
|
||||
uses: cpanato/vault-installer@main
|
||||
- name: Unseal Vault
|
||||
run: |
|
||||
echo ${VAULT_SHARDS}
|
||||
echo "Unsealing vault..."
|
||||
for vault_shard in $(cat ${VAULT_SHARDS}); do
|
||||
for vault_shard in $(echo ${VAULT_SHARDS}); do
|
||||
vault operator unseal -address=${VAULT_ADDR} -non-interactive "${vault_shard}"
|
||||
done
|
||||
Reference in New Issue
Block a user