diff --git a/utils/vault/unseal-eglide-vault.sh b/utils/vault/unseal-eglide-vault.sh new file mode 100755 --- /dev/null +++ b/utils/vault/unseal-eglide-vault.sh @@ -0,0 +1,21 @@ +#!/bin/sh + +# ------------------------------------------------------------- +# Unseal Vault on Eglide from secret store in main Vault +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +# Project: Nasqueron +# License: BSD-2-Clause +# ------------------------------------------------------------- + +set -e + +KEY=ops/secrets/eglide/vault/unseal +SERVER=eglide.org + +# ------------------------------------------------------------- +# Unseal +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +for i in 1 3 5; do + vault kv get -format=json $KEY | jq -r .data.data.key$i | ssh $SERVER "socat STDIO 'EXEC:vault operator unseal,PTY'" +done