coulomb/railiance-master
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prove OpenBao isolated restore

Browse source
This commit is contained in:
codex 2026-08-03 20:38:27 +02:00
parent b8fdc4aa45
commit 7fd89ad6b0
4 changed files with 64 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

13
tools/openbao-attended-unseal-drill.sh Executable file
View file

@ -0,0 +1,13 @@
#!/usr/bin/env bash
set -euo pipefail
remote=(ssh -tt railiance01)
unseal='kubectl -n openbao-restore-drill exec -it openbao -- env BAO_ADDR=http://127.0.0.1:8200 bao operator unseal'
status='kubectl -n openbao-restore-drill exec openbao -- env BAO_ADDR=http://127.0.0.1:8200 bao status'
echo "OpenBao isolated restore: enter source share 1 of 2 at the hidden prompt."
"${remote[@]}" "$unseal"
echo "OpenBao isolated restore: enter a different source share at the hidden prompt."
"${remote[@]}" "$unseal"
echo "OpenBao isolated restore status:"
"${remote[@]}" "$status"