kubernetes vault ha with consul

consul-vault.md

Secret

kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" -o go-template="{{.data.password | base64decode}}"

Unseal vault key

init and store unseal key and root token

kubectl exec argo-vault-0 -- vault operator init

unseal all vault pod with init unseal key

kubectl exec argo-vault-0 -- vault operator unseal <unseal_key_0>
kubectl exec argo-vault-1 -- vault operator unseal <unseal_key_0>
kubectl exec argo-vault-2 -- vault operator unseal <unseal_key_0>

kubectl exec argo-vault-0 -- vault operator unseal <unseal_key_1>
kubectl exec argo-vault-1 -- vault operator unseal <unseal_key_1>
kubectl exec argo-vault-2 -- vault operator unseal <unseal_key_1>

kubectl exec argo-vault-0 -- vault operator unseal <unseal_key_2>
kubectl exec argo-vault-1 -- vault operator unseal <unseal_key_2>
kubectl exec argo-vault-2 -- vault operator unseal <unseal_key_2>