The Lean Canvas is a version of the Business Model Canvas adapted by Ash Maurya specifically for startups. You can read more about it here.
|
Problem
Top 3 Problems |
Jean-Baptiste PIN jbpin
ccampanale
/ vaultsealmanager.sh
Created
December 10, 2015 19:31
Bash shell script to check seal status for local vault server and attempt to unseal using keys secured in vault secret store. Supports HA Vault clusters with TLS with unseal keys stored as secrets in vault (see code). Relies on registered service vault.service.consul, in place DNS configuration, and a single unsealed vault instance in your clust…
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| export vault=/usr/local/bin/vault | |
| export VAULT_TOKEN=$(cat /root/.vault-token) | |
| vault_cacert='-ca-cert=/path/to/your/ca.pem' | |
| local_vault="-address=https://$(hostname -f):8200" | |
| unsealed_vault="-address=https://$(getent hosts $(dig +short vault.service.consul | tail -n 1) | awk '{ print $2 }'):8200" | |
| leader_vault="-address=https://$($vault status $vault_cacert $unsealed_vault 2> /dev/null | grep Leader | awk '{ print $2 }' | sed 's/^http\(\|s\):\/\///g'):8200" | |
| vault_read="$vault read $vault_cacert $leader_vault" | |
| vault_unseal="$vault unseal $vault_cacert $local_vault" |