nirv-ai / db-core

0 stars 0 forks source link

vault: spike auto unseal with vault transit as an upgrade from the vault.sh process currently in use #64

Open noahehall opened 1 year ago

noahehall commented 1 year ago

C

the unseal process is currently invoked via a script; but vault docs speak of mysterious and magical auto unseal spell

T

...

A

auto unseal: paid
- alicloud kms
- aws kms [prefferred]
- cant afford it use seal transit instead
- azure key vault
- gcp cloud kms
- oci kms
- hsm pkcs11
auto unseal: free
- vault transit