Skip to content

omegion/vault-unseal

Vault Auto Unseal

Check Coverall Report Doc License

CLI command to automatically unseal Vault

Usage:
  vault-unseal [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  unseal      Unseal Vault.
  version     Print the version/build number

Flags:
      --config string      config file (default is ~/.<YOUR_CONFIG_NAME>/<CONFIG_FILE_NAME>.<CONFIG_FILE_TYPE>)
  -h, --help               help for vault-unseal
      --logFormat string   Set the logging format. One of: text|json (default "text") (default "text")
      --logLevel string    Set the logging level. One of: debug|info|warn|error (default "info")

Use "vault-unseal [command] --help" for more information about a command.

Requirements

  • Vault Server

What does it do?

Its a tool to unseal your Vault Server with given shards.

How to use it

  1. Run unseal command with your Vault address and shards.
vault-unseal unseal --address https://my.vault.server \
  --shard=<SHARD_1>
  --shard=<SHARD_2>
  --shard=<SHARD_3>

Vault Unseal GitHub Action

You can use Vault Unseal GitHub Action to create periodical action to be sure that your Vault is always unsealed.

Improvements to be made

  • 100% test coverage.
  • Better covering for other features.