Final fix for Vault auto-unseal (hopefully).
Auto-Unseal for Vault / Unseal Vault (push) Has been cancelled

This commit is contained in:
2025-05-19 07:42:49 -04:00
parent 29308c6220
commit af67babef5
+3 -9
View File
@@ -1,12 +1,8 @@
name: Auto-Unseal for Vault name: Auto-Unseal for Vault
on: on:
push: push:
branches: schedule:
- 'main' - cron: "30 2 * * *"
paths:
- '**/vault-auto-unseal.yml'
# schedule:
# - cron: "30 4 * * *"
jobs: jobs:
auto-unseal: auto-unseal:
name: Unseal Vault name: Unseal Vault
@@ -28,8 +24,6 @@ jobs:
uses: cpanato/vault-installer@main uses: cpanato/vault-installer@main
- name: Unseal Vault - name: Unseal Vault
run: | run: |
echo ${VAULT_SHARDS} for vault_shard in $(echo ${VAULT_SHARDS}); do
echo "Unsealing vault..."
for vault_shard in $(cat ${VAULT_SHARDS}); do
vault operator unseal -address=${VAULT_ADDR} -non-interactive "${vault_shard}" vault operator unseal -address=${VAULT_ADDR} -non-interactive "${vault_shard}"
done done