33 lines
997 B
Bash
33 lines
997 B
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
vault_file="vault-secrets.txt"
|
||
|
|
vault_token_file="vault-token.txt"
|
||
|
|
|
||
|
|
vault_vip=$(juju config vault vip)
|
||
|
|
|
||
|
|
export VAULT_ADDR="http://${vault_vip}:8200"
|
||
|
|
|
||
|
|
vault operator init -key-shares=5 -key-threshold=3 > ${vault_file}
|
||
|
|
|
||
|
|
IPS=$(juju status vault --format json | jq '.applications.vault.units | to_entries[] | .value."public-address"' | sed s/\"//g)
|
||
|
|
|
||
|
|
for ip in $IPS;do
|
||
|
|
echo export VAULT_ADDR=http://${ip}:8200;
|
||
|
|
export VAULT_ADDR=http://${ip}:8200;
|
||
|
|
for vault_key in $(head -n3 ${vault_file} | awk '{print $4}');do
|
||
|
|
echo vault operator unseal -tls-skip-verify $vault_key
|
||
|
|
vault operator unseal -tls-skip-verify $vault_key
|
||
|
|
done;
|
||
|
|
done;
|
||
|
|
|
||
|
|
initial_token=$(grep Initial ${vault_file} | awk '{print $4}')
|
||
|
|
|
||
|
|
export VAULT_ADDR="http://${vault_vip}:8200"
|
||
|
|
export VAULT_TOKEN=${initial_token}
|
||
|
|
|
||
|
|
vault token create -ttl=10m > ${vault_token_file}
|
||
|
|
|
||
|
|
token=$(cat ${vault_token_file} | grep token | head -n 1 | awk '{print $2}')
|
||
|
|
|
||
|
|
juju run-action --wait vault/leader authorize-charm token=${token}
|