Page MenuHomeDevCentral
Create Task
Maniphest T2357

Upgrade Vault to 2.1.0
Closed, ResolvedPublic
Actions

Description

Pending T2040, I'm upgrading Vault to last version, v2.1.0.

The OpenBao migration should be done with a refresh of the PKI, so for now, we're still using Vault, and when automation for the PKI is ready, we can consider to migrate to OpenBao.

(for more information about our migration from BSL software to open-source software forks, see T1938)

Plan:

  • backup Raft storage
  • migrate to 1.21.4, the last 1.x version
  • migrate to 2.1.0

Rollback:

  • downgrade to 1.15.4, the current version
  • restore Raft storage

Revisions and Commits

rOPS Nasqueron Operations
D4202rOPS758633353a34 Allow admin Vault policy to backup Raft storage

Related Objects

Event Timeline

dereckson triaged this task as Normal priority.Fri, Sep 4, 19:48
dereckson created this task.
dereckson added a revision: D4202: Allow admin Vault policy to backup Raft storage.Fri, Sep 4, 19:53
dereckson added a commit: rOPS758633353a34: Allow admin Vault policy to backup Raft storage.Fri, Sep 4, 20:02
dereckson closed this task as Resolved.Fri, Sep 4, 20:15

2026-09-04

  • Complector 20:15 dereckson: Vault upgrade done
  • Complector 20:11 dereckson: Start Vault 2.10.0
  • Complector 20:09 dereckson: Stopping Vault
  • Complector 20:09 dereckson: Vault looks good. Backup of raft storage.
  • Complector 20:06 dereckson: Start Vault 1.21.4
  • Complector 20:04 dereckson: Stop Vault
  • Complector 19:28 dereckson: Backup of raft storage
  • Complector 19:28 dereckson: Starting Vault upgrade
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator