Skip to content
This repository has been archived by the owner on Mar 7, 2021. It is now read-only.
/ vault-unseal Public archive

This small utility is a helper to automatically unlock a Vault instance

License

Notifications You must be signed in to change notification settings

Luzifer/vault-unseal

Repository files navigation

Go Report Card

Luzifer / vault-unseal

This small utility is a helper to automatically unlock a Vault instance by having an amount of servers having access to one or multiple tokens.

Features

  • Provide one or multiple tokens for the unseal command
  • vault-unseal does check whether the vault instance is locked and tries to unlock if it is locked

Usage

# ./vault-unseal --help
Usage of ./vault-unseal:
      --instance="http://127.0.0.1:8200": Vault instance to unlock
  -1, --oneshot[=false]: Only try once and exit after
      --sleep=30: How long to wait between sealed-state checks
      --tokens="": Tokens to try for unsealing the vault instance