UNCLASSIFIED - NO CUI

Skip to content

Add resiliency to auto unseal job

Jeffrey Victor requested to merge unseal-job into main

Included a snippet of the job(s) which can only be found with a DEBUG

error: previous terminated container "vault-init-job" in pod "vault-job-init-7nclg" not found
error: previous terminated container "bigbang-base-secret-creation" in pod "vault-job-init-7nclg" not found
[pod/vault-job-init-7nclg/vault-init-job] ---=== Initializing Vault ===---
[pod/vault-job-init-7nclg/vault-init-job] ---=== VAULT_TOKEN written to /export/key ===---
[pod/vault-job-init-7nclg/vault-init-job]   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
[pod/vault-job-init-7nclg/vault-init-job]                                  Dload  Upload   Total   Spent    Left  Speed
[pod/vault-job-init-7nclg/vault-init-job] 
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   295  100   240  100    55   234k  55000 --:--:-- --:--:-- --:--:--  288k
[pod/vault-job-init-7nclg/vault-init-job] {"type":"shamir","initialized":true,"sealed":true,"t":3,"n":5,"progress":1,"nonce":"0caacebb-8e62-75ae-e042-47d8d10cede5","version":"1.14.2","build_date":"2023-08-24T13:19:12Z","migration":false,"recovery_seal":false,"storage_type":"raft"}
[pod/vault-job-init-7nclg/vault-init-job]   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
[pod/vault-job-init-7nclg/vault-init-job]                                  Dload  Upload   Total   Spent    Left  Speed
[pod/vault-job-init-7nclg/vault-init-job] 
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   295  100   240  100    55   234k  55000 --:--:-- --:--:-- --:--:--  288k
[pod/vault-job-init-7nclg/vault-init-job] {"type":"shamir","initialized":true,"sealed":true,"t":3,"n":5,"progress":2,"nonce":"0caacebb-8e62-75ae-e042-47d8d10cede5","version":"1.14.2","build_date":"2023-08-24T13:19:12Z","migration":false,"recovery_seal":false,"storage_type":"raft"}
[pod/vault-job-init-7nclg/vault-init-job]   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
[pod/vault-job-init-7nclg/vault-init-job]                                  Dload  Upload   Total   Spent    Left  Speed
[pod/vault-job-init-7nclg/vault-init-job] 
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   352  100   297  100    55   145k  27500 --:--:-- --:--:-- --:--:--  171k
[pod/vault-job-init-7nclg/vault-init-job] {"type":"shamir","initialized":true,"sealed":false,"t":3,"n":5,"progress":0,"nonce":"","version":"1.14.2","build_date":"2023-08-24T13:19:12Z","migration":false,"cluster_name":"vault-cluster-cb2f51f0","cluster_id":"286c3f1f-7e77-3ee9-0b65-303f1d559c73","recovery_seal":false,"storage_type":"raft"}
[pod/vault-job-init-7nclg/vault-init-job] ---=== Logging in ===---
[pod/vault-job-init-7nclg/vault-init-job] ---=== Login Success ===---
[pod/vault-job-init-7nclg/vault-init-job] ---=== Enabling Kubernetes ===---
[pod/vault-job-init-7nclg/vault-init-job] Success! Enabled kubernetes auth method at: kubernetes/
[pod/vault-job-init-7nclg/vault-init-job] ---=== Configuring Kubernetes ===---
[pod/vault-job-init-7nclg/vault-init-job] Success! Data written to: auth/kubernetes/config
[pod/vault-job-init-7nclg/vault-init-job] ---=== Writing prometheus-metrics Policy ===---
[pod/vault-job-init-7nclg/vault-init-job] Success! Uploaded policy: prometheus-metrics
[pod/vault-job-init-7nclg/vault-init-job] ---=== Reading prometheus-metrics Policy ===---
[pod/vault-job-init-7nclg/vault-init-job] path "/sys/metrics" { 
[pod/vault-job-init-7nclg/vault-init-job]   capabilities = ["read"]
[pod/vault-job-init-7nclg/vault-init-job]   }
[pod/vault-job-init-7nclg/vault-init-job] ---=== Writing prometheus-metrics Auth ===---
[pod/vault-job-init-7nclg/vault-init-job] Success! Data written to: auth/kubernetes/role/prometheus
[pod/vault-job-init-7nclg/bigbang-base-secret-creation] ---=== Waiting for vault-init-job to finish ===---
[pod/vault-job-init-7nclg/bigbang-base-secret-creation] ---=== Waiting for vault-init-job to finish ===---
[pod/vault-job-init-7nclg/bigbang-base-secret-creation] ---=== Waiting for vault-init-job to finish ===---
[pod/vault-job-init-7nclg/bigbang-base-secret-creation] ---=== Writing secret ===---
Edited by Jeffrey Victor

Merge request reports