Final fix for Vault auto-unseal (hopefully).
Auto-Unseal for Vault / Unseal Vault (push) Has been cancelled
Auto-Unseal for Vault / Unseal Vault (push) Has been cancelled
This commit is contained in:
@@ -1,12 +1,8 @@
|
|||||||
name: Auto-Unseal for Vault
|
name: Auto-Unseal for Vault
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches:
|
schedule:
|
||||||
- 'main'
|
- cron: "30 2 * * *"
|
||||||
paths:
|
|
||||||
- '**/vault-auto-unseal.yml'
|
|
||||||
# schedule:
|
|
||||||
# - cron: "30 4 * * *"
|
|
||||||
jobs:
|
jobs:
|
||||||
auto-unseal:
|
auto-unseal:
|
||||||
name: Unseal Vault
|
name: Unseal Vault
|
||||||
@@ -28,8 +24,6 @@ jobs:
|
|||||||
uses: cpanato/vault-installer@main
|
uses: cpanato/vault-installer@main
|
||||||
- name: Unseal Vault
|
- name: Unseal Vault
|
||||||
run: |
|
run: |
|
||||||
echo ${VAULT_SHARDS}
|
for vault_shard in $(echo ${VAULT_SHARDS}); do
|
||||||
echo "Unsealing vault..."
|
|
||||||
for vault_shard in $(cat ${VAULT_SHARDS}); do
|
|
||||||
vault operator unseal -address=${VAULT_ADDR} -non-interactive "${vault_shard}"
|
vault operator unseal -address=${VAULT_ADDR} -non-interactive "${vault_shard}"
|
||||||
done
|
done
|
||||||
Reference in New Issue
Block a user