-
**Is your feature request related to a problem? Please describe.**
We need to plan for a scenario where someone accidentally deletes a KMS key, or KMS itself is inaccessible in a region or an account…
-
**Is your feature request related to a problem? Please describe.**
As it currently stands, once Bao is configured to use an auto-unseal mechanism, that mechanism is the _only_ way to unseal Bao. If t…
-
Vault can be auto unsealed by using the keys from aws kms. See #307. Credentials can be passed via kube2iam or via accessKey/SecretKey pair.
-
I'm using this module to deploy vault as part of the AWS EKS Blueprints Terraform solution. I noticed that this addon module doesn't currently support Auto Unseal of Hashi Vault. Does it make sense t…
-
When setting up vault with azure stack you have the option to provide a custom arm endpoint
https://www.vaultproject.io/docs/configuration/storage/azure#arm_endpoint
when setting up azure as the st…
-
every time I start the kind k8s cluster I need to unseal vault, check if it is possible to auto unseal it every time I restart kind
-
When you configure Vault with Auto-unseal, you get Recovery Keys.
The name itself makes a strong implication that their purpose is to recover Vault when the auto-unseal is down.
But actually thi…
maxb updated
7 months ago
-
**Is your feature request related to a problem? Please describe.**
HSMs are expensive and require Vault Enterprise. KMS solutions only work in the cloud. TPM-based auto-unseal would allow for auto-…
-
Hi,
We are using HashiCorp vault helm chart 0.8.0 and vault image 1.5.4 version. We've deployed this in EKS version 1.18 . We managed to unseal vault by manually however when tried the following AW…
-
Is there an example of how to apply the transit auto-unseal variables with this role? I have a cluster with 3 vault servers in HA mode. Will like to implement transit auto-unseal through the role ins…