set up auto-unseal for vault - Githubissues

concourse / prod

bosh/terraform config for our deployments

3 stars 5 forks source link

set up auto-unseal for vault #48

Closed zoetian closed 4 years ago

zoetian commented 4 years ago

[x] auto-unseal
- [x] Understand auto-unseal with Google Cloud Key Management Service (extraEnvVars in values.yaml from the chart vault-helm and auto-unseal settings in vault config file,
- [x] sample terraform config for gcpkms and terraform docs for gcpkms
- [x] terraform update with adding gkms crypto and key ring.
- [x] add gcp credential to hush-house-values-nci in lastpass.
- [x] run command vault operator init to initialize vault.

pivotal-bin-ju commented 4 years ago

DEV NOTE

Today I:

populated gkms into terraform script.
added vault keys into lastpass
added a new template for gcp credential
tuned the config script to make auto-unseal work
created a draft PR https://github.com/concourse/hush-house/pull/89

NEXT: None