vault unseal
vpd vault unseal¶
Unseal Vault pods using keys from a file or 1Password
Synopsis¶
This command unseals Vault pods using unseal keys from a JSON file or a 1Password secret reference. Useful when Vault pods have restarted and need to be unsealed without re-initializing.
Examples¶
vpd vault unseal --file /path/to/vault_keys.json --namespace vault
vpd vault unseal --op-secret "op://vault/keys/vault_keys" --namespace vault
vpd vault unseal --file /path/to/vault_keys.json --namespace vault --pod vault-0
Options¶
-f, --file string Path to vault_keys.json file
-h, --help help for unseal
-n, --namespace string Namespace where Vault is running (default "vault")
-o, --op-secret string 1Password secret reference (e.g. op://vault/keys/vault_keys)
-P, --pod string Specific pod name to unseal (default: all vault pods)
SEE ALSO¶
- vpd vault - vault Utils