New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

set up auto-unseal for vault #48

Closed

6 tasks done

zoetian opened this issue Dec 3, 2019 · 1 comment · Fixed by concourse/hush-house#89

Closed

6 tasks done

set up auto-unseal for vault #48

zoetian opened this issue Dec 3, 2019 · 1 comment · Fixed by concourse/hush-house#89

Member

zoetian commented Dec 3, 2019 •

edited by pivotal-bin-ju

Loading

auto-unseal
- Understand auto-unseal with Google Cloud Key Management Service (extraEnvVars in values.yaml from the chart vault-helm and auto-unseal settings in vault config file,
- sample terraform config for gcpkms and terraform docs for gcpkms
- terraform update with adding gkms crypto and key ring.
- add gcp credential to hush-house-values-nci in lastpass.
- run command vault operator init to initialize vault.

The text was updated successfully, but these errors were encountered:

zoetian mentioned this issue

add well-supported storage backend for vault #44

Closed

pivotal-bin-ju mentioned this issue

enable auto-unseal with leveraging gkms concourse/hush-house#89

Merged

Contributor

pivotal-bin-ju commented Dec 4, 2019

DEV NOTE

Today I:

populated gkms into terraform script.
added vault keys into lastpass
added a new template for gcp credential
tuned the config script to make auto-unseal work
created a draft PR enable auto-unseal with leveraging gkms hush-house#89

NEXT:
None

pivotal-bin-ju closed this as completed in concourse/hush-house#89

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment