Comments (4)
thesandlord
commented on August 25, 2024
I'm having the same issue, curiously this was working in the past but I ran through this again and it is broken now.
Edit: Hold on, I think there is a issue with vault-init container (not really an issue, ill explain after testing). If there are already keys in the GCS bucket, it does not overwrite it. Testing this now.
from vault-on-google-kubernetes-engine.
sethvargo
commented on August 25, 2024
Hey @thesandlord
If the files already exist, it will try to use them for unsealing, so I think that's the intended behavior. You'd probably want to manually delete those keys. What do you think?
from vault-on-google-kubernetes-engine.
sethvargo
commented on August 25, 2024
Hey @daveduke2010
What are the logs from the init container?
$ kubectl get logs -c vault-init vault-0
What are the logs from vault?
$ kubectl get logs -c vault vault-0
The second error you received is correct. The cluster uses a self-signed CA, which is not, by default, trusted by your system CA. You'll either need to trust that or configure Vault with the CA's public key created in previous steps with VAULT_CAPATH.
from vault-on-google-kubernetes-engine.
sethvargo
commented on August 25, 2024
Closing due to inactivity. Please re-open if this is still an issue. Thanks!
from vault-on-google-kubernetes-engine.
Related Issues (15)
- Vault is sealed. Unsealing... storage: object doesn't exist HOT 16
- [QUESTION] Upgrade to vault 1.0 HOT 1
- [Self-solved issue] Pulling images from gcr.io HOT 1
- Error initializing core: Failed to lock memory: cannot allocate memory
- Tutorial doesn't convert the string id in ZSH
- CrashLoopBackOff When Deploying Vault HOT 2
- storage migration check error
- Vault PODS are in pending state for ever HOT 1
- "https://127.0.0.1:8200/v1/sys/health: x509: certificate signed by unknown authority" during pod startup
- Support for a version that just uses a tainted node pool HOT 2
- maybe add reminder to update your vault client to 0.10 HOT 1
- Vault pod can't initialize HOT 2
- [Question] Should the ca.pem be persisted for further access in KMS? HOT 2
- [Question] - How to enable audit devices to stdout and save in Stackdriver Logs? HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault-on-google-kubernetes-engine.