search

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management
https://www.vaultproject.io/
Other
30.76k stars 4.16k forks source link

Azurestack auto unseal #12905

Open obikay200 opened 2 years ago

obikay200 commented 2 years ago

When setting up vault with azure stack you have the option to provide a custom arm endpoint https://www.vaultproject.io/docs/configuration/storage/azure#arm_endpoint when setting up azure as the storage backend.

This works nicely and i have been using this for a while now.

My issue is that i cant seem to find the same options for the auto unseal feature, which would massively improve things as i constantly need to unseal it when the pod moves around the cluster during node updates.

https://www.vaultproject.io/docs/configuration/seal/azurekeyvault

Can this be added to the auto unseal or is this enabled and im missing a trick?

heatherezell commented 2 years ago

Hi! Does this document help? Please let me know if it meets your needs: https://learn.hashicorp.com/tutorials/vault/autounseal-azure-keyvault

obikay200 commented 2 years ago

Its the ability to specify a custom arm endpoint the same as the storage provider im after. https://www.vaultproject.io/docs/configuration/storage/azure#arm_endpoint as with out it i cant specify azurestackcloud as the environment

heatherezell commented 2 years ago

I see! You are correct, specifying arm_endpoint is not currently supported with Azure key vault autounseal. I'll bring this up as an enhancement request to the team. Thanks! :)

heatherezell commented 2 years ago

(Just as a note, this issue was closed via a manual error and re-opened - thanks for understanding!)

TheBlackMini commented 1 year ago

Hi, just wondering if there has been any progress on this?