Files
vault/scripts/vault_unseal.py
ducoterra cd91da981e Update README with CA instructions
Add CA issuer instructions for vault-ca
2021-05-21 11:50:34 -04:00

33 lines
745 B
Python
Executable File

#!/usr/bin/python3
import json
import os
import subprocess
import threading
vaults = ["vault-0"]
home = os.getenv("HOME")
with open(os.path.join(home, ".vault-keys/cluster-keys.json")) as f:
vault_secrets = json.load(f)
procs = []
for vault in vaults:
procs += [
threading.Thread(
target = subprocess.run,
args = (
["kubectl", "--context", "k3os-alpha.dnet-admin-vault",
"exec", "-ti", vault, "--",
"vault", "operator", "unseal",
vault_secrets.get("unseal_keys_b64")[key]],))
for key in range(int(vault_secrets.get("unseal_threshold")))
]
for thread in procs:
thread.start()
for thread in procs:
thread.join()